--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-14T12:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"639a03f4df5698ecf079cd05473d275e851dfa7609b6ca7511f4168d68932ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:17:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:17:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["639a03f4df5698ecf079cd05473d275e851dfa7609b6ca7511f4168d68932ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c058c930887ac35f3625d9c86d51be6aae41053170ef1b7096e19c6b1f741"} {"level":"info","ts":"2026-07-14T12:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"639a03f4df5698ecf079cd05473d275e851dfa7609b6ca7511f4168d68932ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"639a03f4df5698ecf079cd05473d275e851dfa7609b6ca7511f4168d68932ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:17:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:17:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"639a03f4df5698ecf079cd05473d275e851dfa7609b6ca7511f4168d68932ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"639a03f4df5698ecf079cd05473d275e851dfa7609b6ca7511f4168d68932ffa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/639a03f4df5698ecf079cd05473d275e851dfa7609b6ca7511f4168d68932ffa"} {"level":"debug","ts":"2026-07-14T12:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"639a03f4df5698ecf079cd05473d275e851dfa7609b6ca7511f4168d68932ffa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/639a03f4df5698ecf079cd05473d275e851dfa7609b6ca7511f4168d68932ffa"} {"level":"debug","ts":"2026-07-14T12:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"639a03f4df5698ecf079cd05473d275e851dfa7609b6ca7511f4168d68932ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:17:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:17:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["639a03f4df5698ecf079cd05473d275e851dfa7609b6ca7511f4168d68932ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"639a03f4df5698ecf079cd05473d275e851dfa7609b6ca7511f4168d68932ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"639a03f4df5698ecf079cd05473d275e851dfa7609b6ca7511f4168d68932ffa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/639a03f4df5698ecf079cd05473d275e851dfa7609b6ca7511f4168d68932ffa"} {"level":"info","ts":"2026-07-14T12:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4383cdd2f5f76d37fa0034e71fd0746c790e59be61bfb10f459230c16c51274e"} {"level":"info","ts":"2026-07-14T12:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df632ae1819954d2d3a92745fcc82c190def62ea754139da9fa095b468932862"} {"level":"info","ts":"2026-07-14T12:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc53a0ec0ad30f1e7a2d9b7f19dfe53c5e877bc5443e6a087b8eae41b79224ab"} {"level":"info","ts":"2026-07-14T12:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd3b6cd76df8f39478e93eda13fb9829d786354e137bac95326fb5041a00d132"} {"level":"info","ts":"2026-07-14T12:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8692bdeff72213776470f954376cdb41519079759af54810ee4f189c64bf7596"} {"level":"info","ts":"2026-07-14T12:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df5c058c930887ac35f3625d9c86d51be6aae41053170ef1b7096e19c6b1f741"} {"level":"info","ts":"2026-07-14T12:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/639a03f4df5698ecf079cd05473d275e851dfa7609b6ca7511f4168d68932ffa"} {"level":"info","ts":"2026-07-14T12:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1aa4386045876d981acdfb01eae2ab2bc45047778fedad75757b34ae56414682"} {"level":"debug","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16"} {"level":"debug","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16"} {"level":"debug","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16"} {"level":"info","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92"} {"level":"info","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16"} {"level":"error","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92"} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0"} {"level":"error","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0"} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540b72bffdca753dc994c8ea9386b789155208fe717485af82141c5351c9b870","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540b72bffdca753dc994c8ea9386b789155208fe717485af82141c5351c9b870","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540b72bffdca753dc994c8ea9386b789155208fe717485af82141c5351c9b870"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540b72bffdca753dc994c8ea9386b789155208fe717485af82141c5351c9b870","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540b72bffdca753dc994c8ea9386b789155208fe717485af82141c5351c9b870"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540b72bffdca753dc994c8ea9386b789155208fe717485af82141c5351c9b870","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540b72bffdca753dc994c8ea9386b789155208fe717485af82141c5351c9b870"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540b72bffdca753dc994c8ea9386b789155208fe717485af82141c5351c9b870","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5"} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540b72bffdca753dc994c8ea9386b789155208fe717485af82141c5351c9b870"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5"} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f"} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e381c103d2ab9385223454a3b0a5058b40988e39eccf9d0162bc87559f24bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e381c103d2ab9385223454a3b0a5058b40988e39eccf9d0162bc87559f24bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e381c103d2ab9385223454a3b0a5058b40988e39eccf9d0162bc87559f24bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e381c103d2ab9385223454a3b0a5058b40988e39eccf9d0162bc87559f24bd"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e381c103d2ab9385223454a3b0a5058b40988e39eccf9d0162bc87559f24bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e381c103d2ab9385223454a3b0a5058b40988e39eccf9d0162bc87559f24bd"} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e381c103d2ab9385223454a3b0a5058b40988e39eccf9d0162bc87559f24bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e381c103d2ab9385223454a3b0a5058b40988e39eccf9d0162bc87559f24bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e381c103d2ab9385223454a3b0a5058b40988e39eccf9d0162bc87559f24bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e381c103d2ab9385223454a3b0a5058b40988e39eccf9d0162bc87559f24bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f"} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e381c103d2ab9385223454a3b0a5058b40988e39eccf9d0162bc87559f24bd"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4205cc980bcea8ab39e1214c392242b54f1173d2d3bf546763ae88ac64865a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4205cc980bcea8ab39e1214c392242b54f1173d2d3bf546763ae88ac64865a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4205cc980bcea8ab39e1214c392242b54f1173d2d3bf546763ae88ac64865a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4205cc980bcea8ab39e1214c392242b54f1173d2d3bf546763ae88ac64865a2"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4205cc980bcea8ab39e1214c392242b54f1173d2d3bf546763ae88ac64865a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4205cc980bcea8ab39e1214c392242b54f1173d2d3bf546763ae88ac64865a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4205cc980bcea8ab39e1214c392242b54f1173d2d3bf546763ae88ac64865a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4205cc980bcea8ab39e1214c392242b54f1173d2d3bf546763ae88ac64865a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4205cc980bcea8ab39e1214c392242b54f1173d2d3bf546763ae88ac64865a2"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e"} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4205cc980bcea8ab39e1214c392242b54f1173d2d3bf546763ae88ac64865a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86"} {"level":"info","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941"} {"level":"info","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4205cc980bcea8ab39e1214c392242b54f1173d2d3bf546763ae88ac64865a2"} {"level":"info","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e"} {"level":"info","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86"} {"level":"info","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941"} {"level":"info","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86"} {"level":"info","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941"} {"level":"info","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86"} {"level":"info","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941"} {"level":"debug","ts":"2026-07-14T12:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bed83d51467aca09e8a5dcb0b4600e377986dc3ce8f8a35f3078ea2b7d9ec840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bed83d51467aca09e8a5dcb0b4600e377986dc3ce8f8a35f3078ea2b7d9ec840","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bed83d51467aca09e8a5dcb0b4600e377986dc3ce8f8a35f3078ea2b7d9ec840","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bed83d51467aca09e8a5dcb0b4600e377986dc3ce8f8a35f3078ea2b7d9ec840"} {"level":"debug","ts":"2026-07-14T12:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bed83d51467aca09e8a5dcb0b4600e377986dc3ce8f8a35f3078ea2b7d9ec840","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bed83d51467aca09e8a5dcb0b4600e377986dc3ce8f8a35f3078ea2b7d9ec840"} {"level":"debug","ts":"2026-07-14T12:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bed83d51467aca09e8a5dcb0b4600e377986dc3ce8f8a35f3078ea2b7d9ec840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bed83d51467aca09e8a5dcb0b4600e377986dc3ce8f8a35f3078ea2b7d9ec840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bed83d51467aca09e8a5dcb0b4600e377986dc3ce8f8a35f3078ea2b7d9ec840","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bed83d51467aca09e8a5dcb0b4600e377986dc3ce8f8a35f3078ea2b7d9ec840","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bed83d51467aca09e8a5dcb0b4600e377986dc3ce8f8a35f3078ea2b7d9ec840"} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d"} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d"} {"level":"error","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d"} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d"} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d"} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d"} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8de977b6529bd6ba348f2297eb6f25f31ccd33d9a96bf0edbf16263fa0a9cc6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8de977b6529bd6ba348f2297eb6f25f31ccd33d9a96bf0edbf16263fa0a9cc6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8de977b6529bd6ba348f2297eb6f25f31ccd33d9a96bf0edbf16263fa0a9cc6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8de977b6529bd6ba348f2297eb6f25f31ccd33d9a96bf0edbf16263fa0a9cc6f"} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8de977b6529bd6ba348f2297eb6f25f31ccd33d9a96bf0edbf16263fa0a9cc6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8de977b6529bd6ba348f2297eb6f25f31ccd33d9a96bf0edbf16263fa0a9cc6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8de977b6529bd6ba348f2297eb6f25f31ccd33d9a96bf0edbf16263fa0a9cc6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8de977b6529bd6ba348f2297eb6f25f31ccd33d9a96bf0edbf16263fa0a9cc6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8de977b6529bd6ba348f2297eb6f25f31ccd33d9a96bf0edbf16263fa0a9cc6f"} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8de977b6529bd6ba348f2297eb6f25f31ccd33d9a96bf0edbf16263fa0a9cc6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f5b6a622af5c86293c8d0edb161d5784de727aede829944b7ed681a3fa089f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f5b6a622af5c86293c8d0edb161d5784de727aede829944b7ed681a3fa089f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f5b6a622af5c86293c8d0edb161d5784de727aede829944b7ed681a3fa089f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f5b6a622af5c86293c8d0edb161d5784de727aede829944b7ed681a3fa089f"} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f5b6a622af5c86293c8d0edb161d5784de727aede829944b7ed681a3fa089f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f5b6a622af5c86293c8d0edb161d5784de727aede829944b7ed681a3fa089f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59f5b6a622af5c86293c8d0edb161d5784de727aede829944b7ed681a3fa089f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8de977b6529bd6ba348f2297eb6f25f31ccd33d9a96bf0edbf16263fa0a9cc6f"} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f5b6a622af5c86293c8d0edb161d5784de727aede829944b7ed681a3fa089f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f5b6a622af5c86293c8d0edb161d5784de727aede829944b7ed681a3fa089f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f5b6a622af5c86293c8d0edb161d5784de727aede829944b7ed681a3fa089f"} {"level":"info","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f5b6a622af5c86293c8d0edb161d5784de727aede829944b7ed681a3fa089f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f5b6a622af5c86293c8d0edb161d5784de727aede829944b7ed681a3fa089f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59f5b6a622af5c86293c8d0edb161d5784de727aede829944b7ed681a3fa089f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f5b6a622af5c86293c8d0edb161d5784de727aede829944b7ed681a3fa089f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59f5b6a622af5c86293c8d0edb161d5784de727aede829944b7ed681a3fa089f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f5b6a622af5c86293c8d0edb161d5784de727aede829944b7ed681a3fa089f"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad"} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d50c3a5654e2a3807aece2543cbaa03bb2b0eb767bab0ce66571e5431acc54b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d50c3a5654e2a3807aece2543cbaa03bb2b0eb767bab0ce66571e5431acc54b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d50c3a5654e2a3807aece2543cbaa03bb2b0eb767bab0ce66571e5431acc54b"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d50c3a5654e2a3807aece2543cbaa03bb2b0eb767bab0ce66571e5431acc54b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d50c3a5654e2a3807aece2543cbaa03bb2b0eb767bab0ce66571e5431acc54b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d50c3a5654e2a3807aece2543cbaa03bb2b0eb767bab0ce66571e5431acc54b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d50c3a5654e2a3807aece2543cbaa03bb2b0eb767bab0ce66571e5431acc54b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d50c3a5654e2a3807aece2543cbaa03bb2b0eb767bab0ce66571e5431acc54b"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:19:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a"} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845"} {"level":"info","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e478ba6-efd8-477c-bb09-49fc40fc2c59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42886","PortSpecifier":{"PortValue":42886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e478ba6-efd8-477c-bb09-49fc40fc2c59","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e478ba6-efd8-477c-bb09-49fc40fc2c59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42886","PortSpecifier":{"PortValue":42886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031556,"nanos":798740945},"http":{"id":"3e478ba6-efd8-477c-bb09-49fc40fc2c59","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e478ba6-efd8-477c-bb09-49fc40fc2c59","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e478ba6-efd8-477c-bb09-49fc40fc2c59","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e478ba6-efd8-477c-bb09-49fc40fc2c59","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e478ba6-efd8-477c-bb09-49fc40fc2c59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e478ba6-efd8-477c-bb09-49fc40fc2c59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e478ba6-efd8-477c-bb09-49fc40fc2c59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/auth-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e478ba6-efd8-477c-bb09-49fc40fc2c59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e478ba6-efd8-477c-bb09-49fc40fc2c59","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e478ba6-efd8-477c-bb09-49fc40fc2c59","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e478ba6-efd8-477c-bb09-49fc40fc2c59","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e478ba6-efd8-477c-bb09-49fc40fc2c59","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31e32f73-d6a0-4d25-92a0-9b47275df623","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59264","PortSpecifier":{"PortValue":59264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31e32f73-d6a0-4d25-92a0-9b47275df623","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31e32f73-d6a0-4d25-92a0-9b47275df623","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59264","PortSpecifier":{"PortValue":59264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031556,"nanos":865045662},"http":{"id":"31e32f73-d6a0-4d25-92a0-9b47275df623","method":"POST","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31e32f73-d6a0-4d25-92a0-9b47275df623","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31e32f73-d6a0-4d25-92a0-9b47275df623","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31e32f73-d6a0-4d25-92a0-9b47275df623","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31e32f73-d6a0-4d25-92a0-9b47275df623","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31e32f73-d6a0-4d25-92a0-9b47275df623","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31e32f73-d6a0-4d25-92a0-9b47275df623","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/auth-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31e32f73-d6a0-4d25-92a0-9b47275df623","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31e32f73-d6a0-4d25-92a0-9b47275df623","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31e32f73-d6a0-4d25-92a0-9b47275df623","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31e32f73-d6a0-4d25-92a0-9b47275df623","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31e32f73-d6a0-4d25-92a0-9b47275df623","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e786e30e-3864-4ae3-bd02-11f799953b77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42900","PortSpecifier":{"PortValue":42900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e786e30e-3864-4ae3-bd02-11f799953b77","method":"GET","path":"/maas-api/v1/api-keys/2f583a3e-3d82-4e05-a539-ab179fef2e82","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e786e30e-3864-4ae3-bd02-11f799953b77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42900","PortSpecifier":{"PortValue":42900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031556,"nanos":924640222},"http":{"id":"e786e30e-3864-4ae3-bd02-11f799953b77","method":"GET","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2f583a3e-3d82-4e05-a539-ab179fef2e82",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e786e30e-3864-4ae3-bd02-11f799953b77","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e786e30e-3864-4ae3-bd02-11f799953b77","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e786e30e-3864-4ae3-bd02-11f799953b77","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2f583a3e-3d82-4e05-a539-ab179fef2e82",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e786e30e-3864-4ae3-bd02-11f799953b77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e786e30e-3864-4ae3-bd02-11f799953b77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e786e30e-3864-4ae3-bd02-11f799953b77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/auth-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e786e30e-3864-4ae3-bd02-11f799953b77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e786e30e-3864-4ae3-bd02-11f799953b77","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e786e30e-3864-4ae3-bd02-11f799953b77","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e786e30e-3864-4ae3-bd02-11f799953b77","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e786e30e-3864-4ae3-bd02-11f799953b77","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7426cc95-f42b-4f86-b97d-ba5b457475e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59274","PortSpecifier":{"PortValue":59274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7426cc95-f42b-4f86-b97d-ba5b457475e0","method":"GET","path":"/maas-api/v1/api-keys/81dce554-b9b0-418f-a724-944543a09110","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7426cc95-f42b-4f86-b97d-ba5b457475e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59274","PortSpecifier":{"PortValue":59274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031556,"nanos":958774833},"http":{"id":"7426cc95-f42b-4f86-b97d-ba5b457475e0","method":"GET","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/81dce554-b9b0-418f-a724-944543a09110",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7426cc95-f42b-4f86-b97d-ba5b457475e0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7426cc95-f42b-4f86-b97d-ba5b457475e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7426cc95-f42b-4f86-b97d-ba5b457475e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/81dce554-b9b0-418f-a724-944543a09110",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7426cc95-f42b-4f86-b97d-ba5b457475e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7426cc95-f42b-4f86-b97d-ba5b457475e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7426cc95-f42b-4f86-b97d-ba5b457475e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/auth-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7426cc95-f42b-4f86-b97d-ba5b457475e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7426cc95-f42b-4f86-b97d-ba5b457475e0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7426cc95-f42b-4f86-b97d-ba5b457475e0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7426cc95-f42b-4f86-b97d-ba5b457475e0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:19:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7426cc95-f42b-4f86-b97d-ba5b457475e0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84bebc87-7e4b-4cff-b205-dbe65a43d679","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34040","PortSpecifier":{"PortValue":34040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84bebc87-7e4b-4cff-b205-dbe65a43d679","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84bebc87-7e4b-4cff-b205-dbe65a43d679","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34040","PortSpecifier":{"PortValue":34040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031574,"nanos":205917392},"http":{"id":"84bebc87-7e4b-4cff-b205-dbe65a43d679","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"84bebc87-7e4b-4cff-b205-dbe65a43d679","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84bebc87-7e4b-4cff-b205-dbe65a43d679","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84bebc87-7e4b-4cff-b205-dbe65a43d679","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84bebc87-7e4b-4cff-b205-dbe65a43d679","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84bebc87-7e4b-4cff-b205-dbe65a43d679","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84bebc87-7e4b-4cff-b205-dbe65a43d679","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/auth-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"84bebc87-7e4b-4cff-b205-dbe65a43d679","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84bebc87-7e4b-4cff-b205-dbe65a43d679","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84bebc87-7e4b-4cff-b205-dbe65a43d679","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84bebc87-7e4b-4cff-b205-dbe65a43d679","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84bebc87-7e4b-4cff-b205-dbe65a43d679","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a65bf0d6-199c-46f5-8032-05f8815fc7c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51788","PortSpecifier":{"PortValue":51788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a65bf0d6-199c-46f5-8032-05f8815fc7c2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a65bf0d6-199c-46f5-8032-05f8815fc7c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51788","PortSpecifier":{"PortValue":51788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031574,"nanos":244984115},"http":{"id":"a65bf0d6-199c-46f5-8032-05f8815fc7c2","method":"POST","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a65bf0d6-199c-46f5-8032-05f8815fc7c2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a65bf0d6-199c-46f5-8032-05f8815fc7c2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a65bf0d6-199c-46f5-8032-05f8815fc7c2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a65bf0d6-199c-46f5-8032-05f8815fc7c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a65bf0d6-199c-46f5-8032-05f8815fc7c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a65bf0d6-199c-46f5-8032-05f8815fc7c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/auth-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a65bf0d6-199c-46f5-8032-05f8815fc7c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a65bf0d6-199c-46f5-8032-05f8815fc7c2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a65bf0d6-199c-46f5-8032-05f8815fc7c2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a65bf0d6-199c-46f5-8032-05f8815fc7c2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a65bf0d6-199c-46f5-8032-05f8815fc7c2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07f2521a-e972-4d3f-95e9-61c10b757448","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34054","PortSpecifier":{"PortValue":34054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07f2521a-e972-4d3f-95e9-61c10b757448","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07f2521a-e972-4d3f-95e9-61c10b757448","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34054","PortSpecifier":{"PortValue":34054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031574,"nanos":290525084},"http":{"id":"07f2521a-e972-4d3f-95e9-61c10b757448","method":"GET","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07f2521a-e972-4d3f-95e9-61c10b757448","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AWpvwvY4cF3OIG7G_P04QPMlkF4NJNpEBWIjxwuGHxQlvas6KcD751XMWFrA"} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"07f2521a-e972-4d3f-95e9-61c10b757448","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AWpvwvY4cF3OIG7G_P04QPMlkF4NJNpEBWIjxwuGHxQlvas6KcD751XMWFrA\"}"} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"07f2521a-e972-4d3f-95e9-61c10b757448","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1787475c-d67a-442f-b40f-24176798ef45","keyName":"e2e-auth-iso-a-996a70","subscription":"e2e-auth-iso-edb6f8","tenant":"e2e-shared-a-cac82f","userId":"1787475c-d67a-442f-b40f-24176798ef45","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07f2521a-e972-4d3f-95e9-61c10b757448","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07f2521a-e972-4d3f-95e9-61c10b757448","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07f2521a-e972-4d3f-95e9-61c10b757448","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07f2521a-e972-4d3f-95e9-61c10b757448","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/auth-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07f2521a-e972-4d3f-95e9-61c10b757448","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07f2521a-e972-4d3f-95e9-61c10b757448","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-edb6f8"} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07f2521a-e972-4d3f-95e9-61c10b757448","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07f2521a-e972-4d3f-95e9-61c10b757448","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07f2521a-e972-4d3f-95e9-61c10b757448","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:19:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07f2521a-e972-4d3f-95e9-61c10b757448","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"944bb866-6b38-4c70-81e7-1ca4b43eced0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45444","PortSpecifier":{"PortValue":45444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"944bb866-6b38-4c70-81e7-1ca4b43eced0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"944bb866-6b38-4c70-81e7-1ca4b43eced0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45444","PortSpecifier":{"PortValue":45444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031592,"nanos":446919706},"http":{"id":"944bb866-6b38-4c70-81e7-1ca4b43eced0","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"944bb866-6b38-4c70-81e7-1ca4b43eced0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"944bb866-6b38-4c70-81e7-1ca4b43eced0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"944bb866-6b38-4c70-81e7-1ca4b43eced0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"944bb866-6b38-4c70-81e7-1ca4b43eced0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"944bb866-6b38-4c70-81e7-1ca4b43eced0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"944bb866-6b38-4c70-81e7-1ca4b43eced0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/auth-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"944bb866-6b38-4c70-81e7-1ca4b43eced0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"944bb866-6b38-4c70-81e7-1ca4b43eced0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"944bb866-6b38-4c70-81e7-1ca4b43eced0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"944bb866-6b38-4c70-81e7-1ca4b43eced0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"944bb866-6b38-4c70-81e7-1ca4b43eced0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f002f1df-3b82-4feb-a8ca-a34f625a0918","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53440","PortSpecifier":{"PortValue":53440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f002f1df-3b82-4feb-a8ca-a34f625a0918","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f002f1df-3b82-4feb-a8ca-a34f625a0918","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53440","PortSpecifier":{"PortValue":53440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031592,"nanos":478418971},"http":{"id":"f002f1df-3b82-4feb-a8ca-a34f625a0918","method":"POST","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f002f1df-3b82-4feb-a8ca-a34f625a0918","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f002f1df-3b82-4feb-a8ca-a34f625a0918","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f002f1df-3b82-4feb-a8ca-a34f625a0918","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f002f1df-3b82-4feb-a8ca-a34f625a0918","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f002f1df-3b82-4feb-a8ca-a34f625a0918","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f002f1df-3b82-4feb-a8ca-a34f625a0918","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/auth-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f002f1df-3b82-4feb-a8ca-a34f625a0918","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f002f1df-3b82-4feb-a8ca-a34f625a0918","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f002f1df-3b82-4feb-a8ca-a34f625a0918","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f002f1df-3b82-4feb-a8ca-a34f625a0918","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f002f1df-3b82-4feb-a8ca-a34f625a0918","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"632256ef-e59e-479a-a6be-cd53f9029f7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53444","PortSpecifier":{"PortValue":53444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"632256ef-e59e-479a-a6be-cd53f9029f7f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"632256ef-e59e-479a-a6be-cd53f9029f7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53444","PortSpecifier":{"PortValue":53444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031592,"nanos":512440265},"http":{"id":"632256ef-e59e-479a-a6be-cd53f9029f7f","method":"GET","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"632256ef-e59e-479a-a6be-cd53f9029f7f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-V9YsON2qyzgywe5M_iEcHNEOsMURGPTyZdOXFlBPp5usUHzdjOvzd0PkTxTQ"} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"632256ef-e59e-479a-a6be-cd53f9029f7f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-480a7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-V9YsON2qyzgywe5M_iEcHNEOsMURGPTyZdOXFlBPp5usUHzdjOvzd0PkTxTQ\"}"} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"632256ef-e59e-479a-a6be-cd53f9029f7f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-480a7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"632256ef-e59e-479a-a6be-cd53f9029f7f","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"632256ef-e59e-479a-a6be-cd53f9029f7f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"632256ef-e59e-479a-a6be-cd53f9029f7f","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-14T12:19:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"632256ef-e59e-479a-a6be-cd53f9029f7f","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d2056c8-1219-44d8-a82b-ab7b4e0305c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58292","PortSpecifier":{"PortValue":58292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d2056c8-1219-44d8-a82b-ab7b4e0305c6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d2056c8-1219-44d8-a82b-ab7b4e0305c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58292","PortSpecifier":{"PortValue":58292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031609,"nanos":905542341},"http":{"id":"3d2056c8-1219-44d8-a82b-ab7b4e0305c6","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d2056c8-1219-44d8-a82b-ab7b4e0305c6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d2056c8-1219-44d8-a82b-ab7b4e0305c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d2056c8-1219-44d8-a82b-ab7b4e0305c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d2056c8-1219-44d8-a82b-ab7b4e0305c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d2056c8-1219-44d8-a82b-ab7b4e0305c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d2056c8-1219-44d8-a82b-ab7b4e0305c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/auth-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d2056c8-1219-44d8-a82b-ab7b4e0305c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d2056c8-1219-44d8-a82b-ab7b4e0305c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d2056c8-1219-44d8-a82b-ab7b4e0305c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d2056c8-1219-44d8-a82b-ab7b4e0305c6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d2056c8-1219-44d8-a82b-ab7b4e0305c6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67ebb0c0-47ed-4274-b293-fd31060f52f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45896","PortSpecifier":{"PortValue":45896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67ebb0c0-47ed-4274-b293-fd31060f52f5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67ebb0c0-47ed-4274-b293-fd31060f52f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45896","PortSpecifier":{"PortValue":45896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031609,"nanos":940810003},"http":{"id":"67ebb0c0-47ed-4274-b293-fd31060f52f5","method":"POST","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"67ebb0c0-47ed-4274-b293-fd31060f52f5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67ebb0c0-47ed-4274-b293-fd31060f52f5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67ebb0c0-47ed-4274-b293-fd31060f52f5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67ebb0c0-47ed-4274-b293-fd31060f52f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67ebb0c0-47ed-4274-b293-fd31060f52f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67ebb0c0-47ed-4274-b293-fd31060f52f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/auth-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"67ebb0c0-47ed-4274-b293-fd31060f52f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67ebb0c0-47ed-4274-b293-fd31060f52f5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67ebb0c0-47ed-4274-b293-fd31060f52f5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67ebb0c0-47ed-4274-b293-fd31060f52f5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67ebb0c0-47ed-4274-b293-fd31060f52f5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44bef60e-57d6-425f-95cc-2bab5509c761","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58300","PortSpecifier":{"PortValue":58300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44bef60e-57d6-425f-95cc-2bab5509c761","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44bef60e-57d6-425f-95cc-2bab5509c761","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58300","PortSpecifier":{"PortValue":58300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031609,"nanos":984237729},"http":{"id":"44bef60e-57d6-425f-95cc-2bab5509c761","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44bef60e-57d6-425f-95cc-2bab5509c761","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44bef60e-57d6-425f-95cc-2bab5509c761","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44bef60e-57d6-425f-95cc-2bab5509c761","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44bef60e-57d6-425f-95cc-2bab5509c761","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44bef60e-57d6-425f-95cc-2bab5509c761","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44bef60e-57d6-425f-95cc-2bab5509c761","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/auth-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44bef60e-57d6-425f-95cc-2bab5509c761","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44bef60e-57d6-425f-95cc-2bab5509c761","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44bef60e-57d6-425f-95cc-2bab5509c761","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44bef60e-57d6-425f-95cc-2bab5509c761","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44bef60e-57d6-425f-95cc-2bab5509c761","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:20:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"404aebb1-7bb5-4f86-8853-3dcd11a7fe6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45908","PortSpecifier":{"PortValue":45908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"404aebb1-7bb5-4f86-8853-3dcd11a7fe6d","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:20:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"404aebb1-7bb5-4f86-8853-3dcd11a7fe6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45908","PortSpecifier":{"PortValue":45908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031610,"nanos":23009465},"http":{"id":"404aebb1-7bb5-4f86-8853-3dcd11a7fe6d","method":"POST","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"404aebb1-7bb5-4f86-8853-3dcd11a7fe6d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:20:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"404aebb1-7bb5-4f86-8853-3dcd11a7fe6d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:20:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"404aebb1-7bb5-4f86-8853-3dcd11a7fe6d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"404aebb1-7bb5-4f86-8853-3dcd11a7fe6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"404aebb1-7bb5-4f86-8853-3dcd11a7fe6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"404aebb1-7bb5-4f86-8853-3dcd11a7fe6d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/auth-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"404aebb1-7bb5-4f86-8853-3dcd11a7fe6d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:20:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"404aebb1-7bb5-4f86-8853-3dcd11a7fe6d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:20:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"404aebb1-7bb5-4f86-8853-3dcd11a7fe6d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:20:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"404aebb1-7bb5-4f86-8853-3dcd11a7fe6d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:20:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"404aebb1-7bb5-4f86-8853-3dcd11a7fe6d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d506b84-391c-4536-93a9-de350c46161b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:37614","PortSpecifier":{"PortValue":37614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d506b84-391c-4536-93a9-de350c46161b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d506b84-391c-4536-93a9-de350c46161b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:37614","PortSpecifier":{"PortValue":37614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031629,"nanos":481069344},"http":{"id":"5d506b84-391c-4536-93a9-de350c46161b","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5d506b84-391c-4536-93a9-de350c46161b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d506b84-391c-4536-93a9-de350c46161b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d506b84-391c-4536-93a9-de350c46161b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d506b84-391c-4536-93a9-de350c46161b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d506b84-391c-4536-93a9-de350c46161b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d506b84-391c-4536-93a9-de350c46161b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/auth-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d506b84-391c-4536-93a9-de350c46161b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d506b84-391c-4536-93a9-de350c46161b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d506b84-391c-4536-93a9-de350c46161b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d506b84-391c-4536-93a9-de350c46161b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d506b84-391c-4536-93a9-de350c46161b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7b77266-9813-4edc-8747-07a834c6903e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57546","PortSpecifier":{"PortValue":57546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7b77266-9813-4edc-8747-07a834c6903e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7b77266-9813-4edc-8747-07a834c6903e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57546","PortSpecifier":{"PortValue":57546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031629,"nanos":521127755},"http":{"id":"c7b77266-9813-4edc-8747-07a834c6903e","method":"POST","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c7b77266-9813-4edc-8747-07a834c6903e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7b77266-9813-4edc-8747-07a834c6903e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7b77266-9813-4edc-8747-07a834c6903e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7b77266-9813-4edc-8747-07a834c6903e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7b77266-9813-4edc-8747-07a834c6903e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7b77266-9813-4edc-8747-07a834c6903e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/auth-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7b77266-9813-4edc-8747-07a834c6903e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7b77266-9813-4edc-8747-07a834c6903e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7b77266-9813-4edc-8747-07a834c6903e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7b77266-9813-4edc-8747-07a834c6903e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7b77266-9813-4edc-8747-07a834c6903e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efd216e2-5e23-4715-955c-13935f571e0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57560","PortSpecifier":{"PortValue":57560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efd216e2-5e23-4715-955c-13935f571e0e","method":"GET","path":"/maas-api/v1/api-keys/4c1d8c50-2123-4029-a10b-775eb3b8a4a6","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efd216e2-5e23-4715-955c-13935f571e0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57560","PortSpecifier":{"PortValue":57560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031629,"nanos":559700897},"http":{"id":"efd216e2-5e23-4715-955c-13935f571e0e","method":"GET","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4c1d8c50-2123-4029-a10b-775eb3b8a4a6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"efd216e2-5e23-4715-955c-13935f571e0e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efd216e2-5e23-4715-955c-13935f571e0e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efd216e2-5e23-4715-955c-13935f571e0e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4c1d8c50-2123-4029-a10b-775eb3b8a4a6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efd216e2-5e23-4715-955c-13935f571e0e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efd216e2-5e23-4715-955c-13935f571e0e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efd216e2-5e23-4715-955c-13935f571e0e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/auth-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"efd216e2-5e23-4715-955c-13935f571e0e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efd216e2-5e23-4715-955c-13935f571e0e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efd216e2-5e23-4715-955c-13935f571e0e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efd216e2-5e23-4715-955c-13935f571e0e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efd216e2-5e23-4715-955c-13935f571e0e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2514905-6341-48c5-ba3b-224f162d4d9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:37626","PortSpecifier":{"PortValue":37626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2514905-6341-48c5-ba3b-224f162d4d9e","method":"GET","path":"/maas-api/v1/api-keys/4c1d8c50-2123-4029-a10b-775eb3b8a4a6","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2514905-6341-48c5-ba3b-224f162d4d9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:37626","PortSpecifier":{"PortValue":37626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031629,"nanos":599957002},"http":{"id":"c2514905-6341-48c5-ba3b-224f162d4d9e","method":"GET","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4c1d8c50-2123-4029-a10b-775eb3b8a4a6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2514905-6341-48c5-ba3b-224f162d4d9e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2514905-6341-48c5-ba3b-224f162d4d9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2514905-6341-48c5-ba3b-224f162d4d9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4c1d8c50-2123-4029-a10b-775eb3b8a4a6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2514905-6341-48c5-ba3b-224f162d4d9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2514905-6341-48c5-ba3b-224f162d4d9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2514905-6341-48c5-ba3b-224f162d4d9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/auth-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2514905-6341-48c5-ba3b-224f162d4d9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2514905-6341-48c5-ba3b-224f162d4d9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2514905-6341-48c5-ba3b-224f162d4d9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2514905-6341-48c5-ba3b-224f162d4d9e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:20:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2514905-6341-48c5-ba3b-224f162d4d9e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a11b2173-e17d-431b-8c7c-a29763451c7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57560","PortSpecifier":{"PortValue":57560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a11b2173-e17d-431b-8c7c-a29763451c7e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a11b2173-e17d-431b-8c7c-a29763451c7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57560","PortSpecifier":{"PortValue":57560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031649,"nanos":48349325},"http":{"id":"a11b2173-e17d-431b-8c7c-a29763451c7e","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a11b2173-e17d-431b-8c7c-a29763451c7e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a11b2173-e17d-431b-8c7c-a29763451c7e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a11b2173-e17d-431b-8c7c-a29763451c7e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a11b2173-e17d-431b-8c7c-a29763451c7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a11b2173-e17d-431b-8c7c-a29763451c7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a11b2173-e17d-431b-8c7c-a29763451c7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/auth-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a11b2173-e17d-431b-8c7c-a29763451c7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a11b2173-e17d-431b-8c7c-a29763451c7e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a11b2173-e17d-431b-8c7c-a29763451c7e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a11b2173-e17d-431b-8c7c-a29763451c7e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a11b2173-e17d-431b-8c7c-a29763451c7e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1bfab69-6995-4ffc-b331-701d5572c19b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40442","PortSpecifier":{"PortValue":40442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1bfab69-6995-4ffc-b331-701d5572c19b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1bfab69-6995-4ffc-b331-701d5572c19b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40442","PortSpecifier":{"PortValue":40442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031649,"nanos":89553419},"http":{"id":"e1bfab69-6995-4ffc-b331-701d5572c19b","method":"POST","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e1bfab69-6995-4ffc-b331-701d5572c19b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1bfab69-6995-4ffc-b331-701d5572c19b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1bfab69-6995-4ffc-b331-701d5572c19b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1bfab69-6995-4ffc-b331-701d5572c19b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1bfab69-6995-4ffc-b331-701d5572c19b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1bfab69-6995-4ffc-b331-701d5572c19b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/auth-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1bfab69-6995-4ffc-b331-701d5572c19b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1bfab69-6995-4ffc-b331-701d5572c19b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1bfab69-6995-4ffc-b331-701d5572c19b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1bfab69-6995-4ffc-b331-701d5572c19b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1bfab69-6995-4ffc-b331-701d5572c19b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3003caf-dfd8-4912-b886-3246f472ffec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57576","PortSpecifier":{"PortValue":57576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3003caf-dfd8-4912-b886-3246f472ffec","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3003caf-dfd8-4912-b886-3246f472ffec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57576","PortSpecifier":{"PortValue":57576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031649,"nanos":127545909},"http":{"id":"d3003caf-dfd8-4912-b886-3246f472ffec","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3003caf-dfd8-4912-b886-3246f472ffec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XuJqojVpf10WzEoh_m1fYkkbv3PrK7mdnldQ7jr4OprZxfbnp72K6u8O4ugp"} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3003caf-dfd8-4912-b886-3246f472ffec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XuJqojVpf10WzEoh_m1fYkkbv3PrK7mdnldQ7jr4OprZxfbnp72K6u8O4ugp\"}"} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3003caf-dfd8-4912-b886-3246f472ffec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"92cf223d-5f5b-4b15-ab10-5ff63ac45df5","keyName":"e2e-auth-iso-a-509dde","subscription":"e2e-auth-iso-4e75bf","tenant":"e2e-shared-a-cac82f","userId":"92cf223d-5f5b-4b15-ab10-5ff63ac45df5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3003caf-dfd8-4912-b886-3246f472ffec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3003caf-dfd8-4912-b886-3246f472ffec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3003caf-dfd8-4912-b886-3246f472ffec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3003caf-dfd8-4912-b886-3246f472ffec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/auth-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3003caf-dfd8-4912-b886-3246f472ffec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3003caf-dfd8-4912-b886-3246f472ffec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-4e75bf"} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3003caf-dfd8-4912-b886-3246f472ffec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d3003caf-dfd8-4912-b886-3246f472ffec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3003caf-dfd8-4912-b886-3246f472ffec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:20:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3003caf-dfd8-4912-b886-3246f472ffec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d0cee2c595cd3a346a97879a0fd345ddfe9e4ce48c8e4b3d8fed0e1266f1a9f"} {"level":"info","ts":"2026-07-14T12:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4205cc980bcea8ab39e1214c392242b54f1173d2d3bf546763ae88ac64865a2"} {"level":"info","ts":"2026-07-14T12:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42f1bb16f52daa0fa56d36c8cf8685aab0917170bb88a2f6434402fd8a68fb16"} {"level":"info","ts":"2026-07-14T12:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/540b72bffdca753dc994c8ea9386b789155208fe717485af82141c5351c9b870"} {"level":"info","ts":"2026-07-14T12:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21e9940d74f78688268daeeb04a465ab0458eb3c2f865eaa6ec089859227a941"} {"level":"info","ts":"2026-07-14T12:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07a3f56cc12fd90b26f154f71a7745a66a42aae853b07074b81096d31c35cce0"} {"level":"info","ts":"2026-07-14T12:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18e381c103d2ab9385223454a3b0a5058b40988e39eccf9d0162bc87559f24bd"} {"level":"info","ts":"2026-07-14T12:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b7983890e19d4428fa8100c39278efbc65ebd37b678d2a8bc4e59e53aad4c86"} {"level":"debug","ts":"2026-07-14T12:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb"} {"level":"debug","ts":"2026-07-14T12:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb"} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb"} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c1469361b02d74cafcae7b2a1debae3e534b9c8caa0913db0c0f2a0f833da34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c1469361b02d74cafcae7b2a1debae3e534b9c8caa0913db0c0f2a0f833da34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c1469361b02d74cafcae7b2a1debae3e534b9c8caa0913db0c0f2a0f833da34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c1469361b02d74cafcae7b2a1debae3e534b9c8caa0913db0c0f2a0f833da34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c1469361b02d74cafcae7b2a1debae3e534b9c8caa0913db0c0f2a0f833da34"} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c1469361b02d74cafcae7b2a1debae3e534b9c8caa0913db0c0f2a0f833da34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c1469361b02d74cafcae7b2a1debae3e534b9c8caa0913db0c0f2a0f833da34"} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c1469361b02d74cafcae7b2a1debae3e534b9c8caa0913db0c0f2a0f833da34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c1469361b02d74cafcae7b2a1debae3e534b9c8caa0913db0c0f2a0f833da34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c1469361b02d74cafcae7b2a1debae3e534b9c8caa0913db0c0f2a0f833da34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c1469361b02d74cafcae7b2a1debae3e534b9c8caa0913db0c0f2a0f833da34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c1469361b02d74cafcae7b2a1debae3e534b9c8caa0913db0c0f2a0f833da34"} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2947cca70834a0f1604dd85f45bc07d1325c18550708f743281c797f115e48c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2947cca70834a0f1604dd85f45bc07d1325c18550708f743281c797f115e48c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2947cca70834a0f1604dd85f45bc07d1325c18550708f743281c797f115e48c"} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2947cca70834a0f1604dd85f45bc07d1325c18550708f743281c797f115e48c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2947cca70834a0f1604dd85f45bc07d1325c18550708f743281c797f115e48c"} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2947cca70834a0f1604dd85f45bc07d1325c18550708f743281c797f115e48c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2947cca70834a0f1604dd85f45bc07d1325c18550708f743281c797f115e48c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2947cca70834a0f1604dd85f45bc07d1325c18550708f743281c797f115e48c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2947cca70834a0f1604dd85f45bc07d1325c18550708f743281c797f115e48c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2947cca70834a0f1604dd85f45bc07d1325c18550708f743281c797f115e48c"} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968"} {"level":"debug","ts":"2026-07-14T12:21:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968"} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f"} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caf6944e80f7eb8bfba79fb7e561f82ae69175b79ca54143200283b129afa83d"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d50c3a5654e2a3807aece2543cbaa03bb2b0eb767bab0ce66571e5431acc54b"} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8de977b6529bd6ba348f2297eb6f25f31ccd33d9a96bf0edbf16263fa0a9cc6f"} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94f051b5cc2559d722e8431b616458d2962cbc6b8fc180032311beacceb81a7a"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2c1f1173ddd50270ccac50d9ffadaa067cdaaecd4c4e9e65375b1ab9ef4e845"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bed83d51467aca09e8a5dcb0b4600e377986dc3ce8f8a35f3078ea2b7d9ec840"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59f5b6a622af5c86293c8d0edb161d5784de727aede829944b7ed681a3fa089f"} {"level":"info","ts":"2026-07-14T12:21:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b48a33599d106ee18c73356376baabaecc6728586a420812f9dfb90dbcd69ad"} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0"} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0"} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0"} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0"} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0"} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0"} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0"} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"} {"level":"error","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b16383f87d0168a65f70617b18ce2f202ac09e6102f3d0d7d5f657e0b64b8b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b16383f87d0168a65f70617b18ce2f202ac09e6102f3d0d7d5f657e0b64b8b83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b16383f87d0168a65f70617b18ce2f202ac09e6102f3d0d7d5f657e0b64b8b83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b16383f87d0168a65f70617b18ce2f202ac09e6102f3d0d7d5f657e0b64b8b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b16383f87d0168a65f70617b18ce2f202ac09e6102f3d0d7d5f657e0b64b8b83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b16383f87d0168a65f70617b18ce2f202ac09e6102f3d0d7d5f657e0b64b8b83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b16383f87d0168a65f70617b18ce2f202ac09e6102f3d0d7d5f657e0b64b8b83"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b16383f87d0168a65f70617b18ce2f202ac09e6102f3d0d7d5f657e0b64b8b83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b16383f87d0168a65f70617b18ce2f202ac09e6102f3d0d7d5f657e0b64b8b83"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b16383f87d0168a65f70617b18ce2f202ac09e6102f3d0d7d5f657e0b64b8b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b16383f87d0168a65f70617b18ce2f202ac09e6102f3d0d7d5f657e0b64b8b83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04"} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b16383f87d0168a65f70617b18ce2f202ac09e6102f3d0d7d5f657e0b64b8b83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b16383f87d0168a65f70617b18ce2f202ac09e6102f3d0d7d5f657e0b64b8b83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04"} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b16383f87d0168a65f70617b18ce2f202ac09e6102f3d0d7d5f657e0b64b8b83"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78fd7f948d290d2e33a35755499100d640aa424eff41e3f7e48695cd0f0e8c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78fd7f948d290d2e33a35755499100d640aa424eff41e3f7e48695cd0f0e8c06"} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78fd7f948d290d2e33a35755499100d640aa424eff41e3f7e48695cd0f0e8c06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04"} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78fd7f948d290d2e33a35755499100d640aa424eff41e3f7e48695cd0f0e8c06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78fd7f948d290d2e33a35755499100d640aa424eff41e3f7e48695cd0f0e8c06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78fd7f948d290d2e33a35755499100d640aa424eff41e3f7e48695cd0f0e8c06"} {"level":"error","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04"} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78fd7f948d290d2e33a35755499100d640aa424eff41e3f7e48695cd0f0e8c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78fd7f948d290d2e33a35755499100d640aa424eff41e3f7e48695cd0f0e8c06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78fd7f948d290d2e33a35755499100d640aa424eff41e3f7e48695cd0f0e8c06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78fd7f948d290d2e33a35755499100d640aa424eff41e3f7e48695cd0f0e8c06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78fd7f948d290d2e33a35755499100d640aa424eff41e3f7e48695cd0f0e8c06"} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04"} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677c5bf98445c527fbb0d31be32e5ea0e7037b2cb90eb073af23fd6a36fa46d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677c5bf98445c527fbb0d31be32e5ea0e7037b2cb90eb073af23fd6a36fa46d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677c5bf98445c527fbb0d31be32e5ea0e7037b2cb90eb073af23fd6a36fa46d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677c5bf98445c527fbb0d31be32e5ea0e7037b2cb90eb073af23fd6a36fa46d3"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677c5bf98445c527fbb0d31be32e5ea0e7037b2cb90eb073af23fd6a36fa46d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677c5bf98445c527fbb0d31be32e5ea0e7037b2cb90eb073af23fd6a36fa46d3"} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677c5bf98445c527fbb0d31be32e5ea0e7037b2cb90eb073af23fd6a36fa46d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["677c5bf98445c527fbb0d31be32e5ea0e7037b2cb90eb073af23fd6a36fa46d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04"} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677c5bf98445c527fbb0d31be32e5ea0e7037b2cb90eb073af23fd6a36fa46d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677c5bf98445c527fbb0d31be32e5ea0e7037b2cb90eb073af23fd6a36fa46d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677c5bf98445c527fbb0d31be32e5ea0e7037b2cb90eb073af23fd6a36fa46d3"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720945603570b39bf8c388f36885102ee566d052e621a73019704d2d15314d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720945603570b39bf8c388f36885102ee566d052e621a73019704d2d15314d5c"} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"720945603570b39bf8c388f36885102ee566d052e621a73019704d2d15314d5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720945603570b39bf8c388f36885102ee566d052e621a73019704d2d15314d5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720945603570b39bf8c388f36885102ee566d052e621a73019704d2d15314d5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720945603570b39bf8c388f36885102ee566d052e621a73019704d2d15314d5c"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720945603570b39bf8c388f36885102ee566d052e621a73019704d2d15314d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["720945603570b39bf8c388f36885102ee566d052e621a73019704d2d15314d5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"720945603570b39bf8c388f36885102ee566d052e621a73019704d2d15314d5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720945603570b39bf8c388f36885102ee566d052e621a73019704d2d15314d5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720945603570b39bf8c388f36885102ee566d052e621a73019704d2d15314d5c"} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a"} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a"} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a"} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a"} {"level":"debug","ts":"2026-07-14T12:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"info","ts":"2026-07-14T12:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"debug","ts":"2026-07-14T12:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"debug","ts":"2026-07-14T12:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"debug","ts":"2026-07-14T12:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b16383f87d0168a65f70617b18ce2f202ac09e6102f3d0d7d5f657e0b64b8b83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b16383f87d0168a65f70617b18ce2f202ac09e6102f3d0d7d5f657e0b64b8b83"} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a"} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2947cca70834a0f1604dd85f45bc07d1325c18550708f743281c797f115e48c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"} {"level":"info","ts":"2026-07-14T12:21:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2947cca70834a0f1604dd85f45bc07d1325c18550708f743281c797f115e48c"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78fd7f948d290d2e33a35755499100d640aa424eff41e3f7e48695cd0f0e8c06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78fd7f948d290d2e33a35755499100d640aa424eff41e3f7e48695cd0f0e8c06"} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968"} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720945603570b39bf8c388f36885102ee566d052e621a73019704d2d15314d5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720945603570b39bf8c388f36885102ee566d052e621a73019704d2d15314d5c"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677c5bf98445c527fbb0d31be32e5ea0e7037b2cb90eb073af23fd6a36fa46d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f"} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c1469361b02d74cafcae7b2a1debae3e534b9c8caa0913db0c0f2a0f833da34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677c5bf98445c527fbb0d31be32e5ea0e7037b2cb90eb073af23fd6a36fa46d3"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c1469361b02d74cafcae7b2a1debae3e534b9c8caa0913db0c0f2a0f833da34"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c"} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb"} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb"} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb"} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb"} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:21:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:21:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb"} {"level":"info","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b1ce7c4-4142-44b7-b60c-95456872130b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:37230","PortSpecifier":{"PortValue":37230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b1ce7c4-4142-44b7-b60c-95456872130b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b1ce7c4-4142-44b7-b60c-95456872130b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:37230","PortSpecifier":{"PortValue":37230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031710,"nanos":163396587},"http":{"id":"0b1ce7c4-4142-44b7-b60c-95456872130b","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0b1ce7c4-4142-44b7-b60c-95456872130b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b1ce7c4-4142-44b7-b60c-95456872130b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b1ce7c4-4142-44b7-b60c-95456872130b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b1ce7c4-4142-44b7-b60c-95456872130b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b1ce7c4-4142-44b7-b60c-95456872130b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b1ce7c4-4142-44b7-b60c-95456872130b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/sub-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0b1ce7c4-4142-44b7-b60c-95456872130b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b1ce7c4-4142-44b7-b60c-95456872130b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b1ce7c4-4142-44b7-b60c-95456872130b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b1ce7c4-4142-44b7-b60c-95456872130b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b1ce7c4-4142-44b7-b60c-95456872130b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c7d490b-0d29-49e9-95f3-32a172cd57df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51456","PortSpecifier":{"PortValue":51456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c7d490b-0d29-49e9-95f3-32a172cd57df","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c7d490b-0d29-49e9-95f3-32a172cd57df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51456","PortSpecifier":{"PortValue":51456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031710,"nanos":216864739},"http":{"id":"5c7d490b-0d29-49e9-95f3-32a172cd57df","method":"POST","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c7d490b-0d29-49e9-95f3-32a172cd57df","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c7d490b-0d29-49e9-95f3-32a172cd57df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c7d490b-0d29-49e9-95f3-32a172cd57df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c7d490b-0d29-49e9-95f3-32a172cd57df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c7d490b-0d29-49e9-95f3-32a172cd57df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c7d490b-0d29-49e9-95f3-32a172cd57df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/sub-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c7d490b-0d29-49e9-95f3-32a172cd57df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c7d490b-0d29-49e9-95f3-32a172cd57df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c7d490b-0d29-49e9-95f3-32a172cd57df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c7d490b-0d29-49e9-95f3-32a172cd57df","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c7d490b-0d29-49e9-95f3-32a172cd57df","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"974e914a-4423-4a87-894c-2acd175181c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:37234","PortSpecifier":{"PortValue":37234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"974e914a-4423-4a87-894c-2acd175181c7","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"974e914a-4423-4a87-894c-2acd175181c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:37234","PortSpecifier":{"PortValue":37234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031710,"nanos":258037838},"http":{"id":"974e914a-4423-4a87-894c-2acd175181c7","method":"GET","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"974e914a-4423-4a87-894c-2acd175181c7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YTnXYsSYwzf4Coaa_otCsYi27PHTMgP6JGl9WA6uqfXs8acY9gZeBlLSQDp5"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"974e914a-4423-4a87-894c-2acd175181c7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YTnXYsSYwzf4Coaa_otCsYi27PHTMgP6JGl9WA6uqfXs8acY9gZeBlLSQDp5\"}"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"974e914a-4423-4a87-894c-2acd175181c7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"772e4241-4bef-45db-9f9d-fc3e79176399","keyName":"e2e-sub-iso-e828cd","subscription":"e2e-a-only-0ab229","tenant":"e2e-shared-a-cac82f","userId":"772e4241-4bef-45db-9f9d-fc3e79176399","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"974e914a-4423-4a87-894c-2acd175181c7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"974e914a-4423-4a87-894c-2acd175181c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"974e914a-4423-4a87-894c-2acd175181c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"974e914a-4423-4a87-894c-2acd175181c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/sub-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"974e914a-4423-4a87-894c-2acd175181c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"974e914a-4423-4a87-894c-2acd175181c7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-0ab229"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"974e914a-4423-4a87-894c-2acd175181c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"974e914a-4423-4a87-894c-2acd175181c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"974e914a-4423-4a87-894c-2acd175181c7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"974e914a-4423-4a87-894c-2acd175181c7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2b2dd7c-c3b5-429f-82b9-2b6411034a1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51458","PortSpecifier":{"PortValue":51458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2b2dd7c-c3b5-429f-82b9-2b6411034a1f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2b2dd7c-c3b5-429f-82b9-2b6411034a1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51458","PortSpecifier":{"PortValue":51458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031710,"nanos":301690157},"http":{"id":"f2b2dd7c-c3b5-429f-82b9-2b6411034a1f","method":"GET","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2b2dd7c-c3b5-429f-82b9-2b6411034a1f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BZcw4LHricXNohWY_LneR5mMXoLzNQiCmwhgT1p3cfXFDpq7vfGa7lP2ZWKu"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f2b2dd7c-c3b5-429f-82b9-2b6411034a1f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-480a7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BZcw4LHricXNohWY_LneR5mMXoLzNQiCmwhgT1p3cfXFDpq7vfGa7lP2ZWKu\"}"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f2b2dd7c-c3b5-429f-82b9-2b6411034a1f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-480a7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97d408ff-27d5-4b68-8a02-5e74d5d477e4","keyName":"e2e-sub-iso-607c05","subscription":"e2e-b-only-0ab229","tenant":"e2e-shared-b-480a7f","userId":"97d408ff-27d5-4b68-8a02-5e74d5d477e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2b2dd7c-c3b5-429f-82b9-2b6411034a1f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2b2dd7c-c3b5-429f-82b9-2b6411034a1f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2b2dd7c-c3b5-429f-82b9-2b6411034a1f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2b2dd7c-c3b5-429f-82b9-2b6411034a1f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/sub-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2b2dd7c-c3b5-429f-82b9-2b6411034a1f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-0ab229"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2b2dd7c-c3b5-429f-82b9-2b6411034a1f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f2b2dd7c-c3b5-429f-82b9-2b6411034a1f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2b2dd7c-c3b5-429f-82b9-2b6411034a1f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2b2dd7c-c3b5-429f-82b9-2b6411034a1f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:21:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2b2dd7c-c3b5-429f-82b9-2b6411034a1f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28737d6e-4489-491b-ac98-a363acb80074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52790","PortSpecifier":{"PortValue":52790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28737d6e-4489-491b-ac98-a363acb80074","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28737d6e-4489-491b-ac98-a363acb80074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52790","PortSpecifier":{"PortValue":52790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031720,"nanos":571014395},"http":{"id":"28737d6e-4489-491b-ac98-a363acb80074","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28737d6e-4489-491b-ac98-a363acb80074","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28737d6e-4489-491b-ac98-a363acb80074","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28737d6e-4489-491b-ac98-a363acb80074","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28737d6e-4489-491b-ac98-a363acb80074","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28737d6e-4489-491b-ac98-a363acb80074","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28737d6e-4489-491b-ac98-a363acb80074","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/sub-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28737d6e-4489-491b-ac98-a363acb80074","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28737d6e-4489-491b-ac98-a363acb80074","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28737d6e-4489-491b-ac98-a363acb80074","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28737d6e-4489-491b-ac98-a363acb80074","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28737d6e-4489-491b-ac98-a363acb80074","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69198d21-3052-4dd7-922a-393e31abedba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:38472","PortSpecifier":{"PortValue":38472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69198d21-3052-4dd7-922a-393e31abedba","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69198d21-3052-4dd7-922a-393e31abedba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:38472","PortSpecifier":{"PortValue":38472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031720,"nanos":611281184},"http":{"id":"69198d21-3052-4dd7-922a-393e31abedba","method":"POST","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69198d21-3052-4dd7-922a-393e31abedba","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69198d21-3052-4dd7-922a-393e31abedba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69198d21-3052-4dd7-922a-393e31abedba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69198d21-3052-4dd7-922a-393e31abedba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69198d21-3052-4dd7-922a-393e31abedba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69198d21-3052-4dd7-922a-393e31abedba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/sub-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69198d21-3052-4dd7-922a-393e31abedba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69198d21-3052-4dd7-922a-393e31abedba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69198d21-3052-4dd7-922a-393e31abedba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69198d21-3052-4dd7-922a-393e31abedba","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69198d21-3052-4dd7-922a-393e31abedba","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"869183b7-bec5-49e4-addd-949a55403e83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52806","PortSpecifier":{"PortValue":52806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"869183b7-bec5-49e4-addd-949a55403e83","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"869183b7-bec5-49e4-addd-949a55403e83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52806","PortSpecifier":{"PortValue":52806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031720,"nanos":656758197},"http":{"id":"869183b7-bec5-49e4-addd-949a55403e83","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"869183b7-bec5-49e4-addd-949a55403e83","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JWTEi5MehaJMdeA2_BGr8wbM4VuNGyyOGxwjtYBFqL8KSY1y6PduDeZbUNaY"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"869183b7-bec5-49e4-addd-949a55403e83","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JWTEi5MehaJMdeA2_BGr8wbM4VuNGyyOGxwjtYBFqL8KSY1y6PduDeZbUNaY\"}"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"869183b7-bec5-49e4-addd-949a55403e83","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2f79de57-c15b-4e38-9356-39ed81f59ec3","keyName":"e2e-sub-iso-56efd5","subscription":"e2e-shared-sub-d03c9a","tenant":"e2e-shared-a-cac82f","userId":"2f79de57-c15b-4e38-9356-39ed81f59ec3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"869183b7-bec5-49e4-addd-949a55403e83","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"869183b7-bec5-49e4-addd-949a55403e83","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"869183b7-bec5-49e4-addd-949a55403e83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"869183b7-bec5-49e4-addd-949a55403e83","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/sub-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"869183b7-bec5-49e4-addd-949a55403e83","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"869183b7-bec5-49e4-addd-949a55403e83","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"869183b7-bec5-49e4-addd-949a55403e83","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d03c9a"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"869183b7-bec5-49e4-addd-949a55403e83","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"869183b7-bec5-49e4-addd-949a55403e83","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"869183b7-bec5-49e4-addd-949a55403e83","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ac4ffa7-913d-40fc-a0aa-41bc4bb7b0d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:38476","PortSpecifier":{"PortValue":38476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ac4ffa7-913d-40fc-a0aa-41bc4bb7b0d5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ac4ffa7-913d-40fc-a0aa-41bc4bb7b0d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:38476","PortSpecifier":{"PortValue":38476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031720,"nanos":687246129},"http":{"id":"4ac4ffa7-913d-40fc-a0aa-41bc4bb7b0d5","method":"POST","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ac4ffa7-913d-40fc-a0aa-41bc4bb7b0d5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12zgSyXnRQBy1F53s_R3Loq0Xq97w25XK5bzGZkCnV1biLKh2FYiF5mJvIMLq"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ac4ffa7-913d-40fc-a0aa-41bc4bb7b0d5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-480a7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12zgSyXnRQBy1F53s_R3Loq0Xq97w25XK5bzGZkCnV1biLKh2FYiF5mJvIMLq\"}"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ac4ffa7-913d-40fc-a0aa-41bc4bb7b0d5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-480a7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"06f415bc-d540-446d-8eb3-7661258d343b","keyName":"e2e-sub-iso-552677","subscription":"e2e-shared-sub-d03c9a","tenant":"e2e-shared-b-480a7f","userId":"06f415bc-d540-446d-8eb3-7661258d343b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ac4ffa7-913d-40fc-a0aa-41bc4bb7b0d5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ac4ffa7-913d-40fc-a0aa-41bc4bb7b0d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ac4ffa7-913d-40fc-a0aa-41bc4bb7b0d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ac4ffa7-913d-40fc-a0aa-41bc4bb7b0d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/sub-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ac4ffa7-913d-40fc-a0aa-41bc4bb7b0d5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ac4ffa7-913d-40fc-a0aa-41bc4bb7b0d5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ac4ffa7-913d-40fc-a0aa-41bc4bb7b0d5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d03c9a"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4ac4ffa7-913d-40fc-a0aa-41bc4bb7b0d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ac4ffa7-913d-40fc-a0aa-41bc4bb7b0d5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:22:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ac4ffa7-913d-40fc-a0aa-41bc4bb7b0d5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:22:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/677c5bf98445c527fbb0d31be32e5ea0e7037b2cb90eb073af23fd6a36fa46d3"} {"level":"info","ts":"2026-07-14T12:22:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3e1268e26d6a100ab8d27037d880e184da08997484b04b90e0ac9fa23934b42"} {"level":"info","ts":"2026-07-14T12:22:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ec5fa2168321bd5733039e55e683aa04b95940ed49142ade45d6913d2f1592c"} {"level":"info","ts":"2026-07-14T12:22:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b21b6d1bde4536937a1a3505f6d402f03e37d8848ff2f6f2703b67ddcfbddeb"} {"level":"info","ts":"2026-07-14T12:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c1469361b02d74cafcae7b2a1debae3e534b9c8caa0913db0c0f2a0f833da34"} {"level":"info","ts":"2026-07-14T12:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78fd7f948d290d2e33a35755499100d640aa424eff41e3f7e48695cd0f0e8c06"} {"level":"info","ts":"2026-07-14T12:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4156b0ccda97cf6d09c38aa371a9bf16c210d48edcd2102593abf3eb0c267869"} {"level":"info","ts":"2026-07-14T12:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2947cca70834a0f1604dd85f45bc07d1325c18550708f743281c797f115e48c"} {"level":"info","ts":"2026-07-14T12:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69511bb89c9566033a0aea65de4242c1698ef06647b2f1caabd9b6b8b6b7fc2a"} {"level":"info","ts":"2026-07-14T12:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ba1472cb4bbbb0c4002a0225c10a1fbad5c5a83325cb3a07a827904edbbfb0d"} {"level":"info","ts":"2026-07-14T12:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/307d944241d2fa52004b1e40eb16f28ba79abec1eb1258fe0a6799db24c23968"} {"level":"info","ts":"2026-07-14T12:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b16383f87d0168a65f70617b18ce2f202ac09e6102f3d0d7d5f657e0b64b8b83"} {"level":"info","ts":"2026-07-14T12:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/720945603570b39bf8c388f36885102ee566d052e621a73019704d2d15314d5c"} {"level":"info","ts":"2026-07-14T12:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51f0492b3fbb82fd2331c4aba1a15ccf490569cce7c060c9a35e4374393a36a0"} {"level":"info","ts":"2026-07-14T12:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0603f1100580f92b811d05f729e8988c2ff34e5072b4523c88e2f837dc12e04"} {"level":"info","ts":"2026-07-14T12:22:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f12cee2198938ce0ba1ab63b98b107697bbc957263097f6e28daa1ee4daf4f1f"} {"level":"debug","ts":"2026-07-14T12:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5"} {"level":"debug","ts":"2026-07-14T12:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5"} {"level":"debug","ts":"2026-07-14T12:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5"} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"error","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb"} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb"} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb"} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c"} {"level":"error","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb"} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c"} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c"} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e"} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e"} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b91180686a4a458380efe4902cb5cf9185aa70e074897f48afd9e76beba438f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b91180686a4a458380efe4902cb5cf9185aa70e074897f48afd9e76beba438f3"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b91180686a4a458380efe4902cb5cf9185aa70e074897f48afd9e76beba438f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b91180686a4a458380efe4902cb5cf9185aa70e074897f48afd9e76beba438f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b91180686a4a458380efe4902cb5cf9185aa70e074897f48afd9e76beba438f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b91180686a4a458380efe4902cb5cf9185aa70e074897f48afd9e76beba438f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b91180686a4a458380efe4902cb5cf9185aa70e074897f48afd9e76beba438f3"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b91180686a4a458380efe4902cb5cf9185aa70e074897f48afd9e76beba438f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b91180686a4a458380efe4902cb5cf9185aa70e074897f48afd9e76beba438f3"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"} {"level":"error","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f134ab97591fac1ea052e70cc7ab075a22720d0844a52937d924c33e5508df8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f134ab97591fac1ea052e70cc7ab075a22720d0844a52937d924c33e5508df8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f134ab97591fac1ea052e70cc7ab075a22720d0844a52937d924c33e5508df8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f134ab97591fac1ea052e70cc7ab075a22720d0844a52937d924c33e5508df8f"} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f134ab97591fac1ea052e70cc7ab075a22720d0844a52937d924c33e5508df8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f134ab97591fac1ea052e70cc7ab075a22720d0844a52937d924c33e5508df8f"} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f134ab97591fac1ea052e70cc7ab075a22720d0844a52937d924c33e5508df8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f134ab97591fac1ea052e70cc7ab075a22720d0844a52937d924c33e5508df8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f134ab97591fac1ea052e70cc7ab075a22720d0844a52937d924c33e5508df8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f134ab97591fac1ea052e70cc7ab075a22720d0844a52937d924c33e5508df8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f134ab97591fac1ea052e70cc7ab075a22720d0844a52937d924c33e5508df8f"} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719"} {"level":"error","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719"} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f"} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"} {"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"} {"level":"error","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"} {"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"} {"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"} {"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"} {"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"} {"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f"} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"error","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e"} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c"} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5"} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746"} {"level":"error","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b91180686a4a458380efe4902cb5cf9185aa70e074897f48afd9e76beba438f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92"} {"level":"debug","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"} {"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"} {"level":"debug","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"} {"level":"debug","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f134ab97591fac1ea052e70cc7ab075a22720d0844a52937d924c33e5508df8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5"} {"level":"debug","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b91180686a4a458380efe4902cb5cf9185aa70e074897f48afd9e76beba438f3"} {"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719"} {"level":"debug","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e"} {"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb"} {"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f134ab97591fac1ea052e70cc7ab075a22720d0844a52937d924c33e5508df8f"} {"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"} {"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e"} {"level":"info","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42610","PortSpecifier":{"PortValue":42610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42610","PortSpecifier":{"PortValue":42610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031788,"nanos":849255800},"http":{"id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42846","PortSpecifier":{"PortValue":42846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42846","PortSpecifier":{"PortValue":42846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031788,"nanos":892855336},"http":{"id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","method":"POST","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/rate-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42626","PortSpecifier":{"PortValue":42626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","method":"POST","path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42626","PortSpecifier":{"PortValue":42626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031788,"nanos":937823314},"http":{"id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fry2AUJxRHNXVBSB_CE7F4GxlohdrW77oRa3daLDOHMmDbiZolQCiVnWJrgc"} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fry2AUJxRHNXVBSB_CE7F4GxlohdrW77oRa3daLDOHMmDbiZolQCiVnWJrgc\"}"} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","keyName":"e2e-rate-a-2f1f58","subscription":"e2e-rate-iso-a-2f1f58","tenant":"e2e-shared-a-cac82f","userId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\",\"requestedSubscription\":\"e2e-rate-iso-a-2f1f58\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2f1f58","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2f1f58"} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","keyName":"e2e-rate-a-2f1f58","selected_subscription":"e2e-rate-iso-a-2f1f58","selected_subscription_key":"ai-tenant-e2e-shared-a-cac82f/e2e-rate-iso-a-2f1f58@ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2f1f58","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42640","PortSpecifier":{"PortValue":42640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","method":"POST","path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42640","PortSpecifier":{"PortValue":42640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031789,"nanos":999958393},"http":{"id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fry2AUJxRHNXVBSB_CE7F4GxlohdrW77oRa3daLDOHMmDbiZolQCiVnWJrgc"} {"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fry2AUJxRHNXVBSB_CE7F4GxlohdrW77oRa3daLDOHMmDbiZolQCiVnWJrgc\"}"} {"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","keyName":"e2e-rate-a-2f1f58","subscription":"e2e-rate-iso-a-2f1f58","tenant":"e2e-shared-a-cac82f","userId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\",\"requestedSubscription\":\"e2e-rate-iso-a-2f1f58\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2f1f58","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2f1f58"} {"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","keyName":"e2e-rate-a-2f1f58","selected_subscription":"e2e-rate-iso-a-2f1f58","selected_subscription_key":"ai-tenant-e2e-shared-a-cac82f/e2e-rate-iso-a-2f1f58@ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2f1f58","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42656","PortSpecifier":{"PortValue":42656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","method":"POST","path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42656","PortSpecifier":{"PortValue":42656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031791,"nanos":40388274},"http":{"id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fry2AUJxRHNXVBSB_CE7F4GxlohdrW77oRa3daLDOHMmDbiZolQCiVnWJrgc"} {"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fry2AUJxRHNXVBSB_CE7F4GxlohdrW77oRa3daLDOHMmDbiZolQCiVnWJrgc\"}"} {"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","keyName":"e2e-rate-a-2f1f58","subscription":"e2e-rate-iso-a-2f1f58","tenant":"e2e-shared-a-cac82f","userId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\",\"requestedSubscription\":\"e2e-rate-iso-a-2f1f58\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2f1f58","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2f1f58"} {"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","keyName":"e2e-rate-a-2f1f58","selected_subscription":"e2e-rate-iso-a-2f1f58","selected_subscription_key":"ai-tenant-e2e-shared-a-cac82f/e2e-rate-iso-a-2f1f58@ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2f1f58","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51468","PortSpecifier":{"PortValue":51468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51468","PortSpecifier":{"PortValue":51468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031804,"nanos":64930868},"http":{"id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33622","PortSpecifier":{"PortValue":33622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33622","PortSpecifier":{"PortValue":33622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031804,"nanos":101897098},"http":{"id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","method":"POST","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/rate-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51478","PortSpecifier":{"PortValue":51478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e142626e-a03e-4f58-bf77-71939d3e1597","method":"POST","path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51478","PortSpecifier":{"PortValue":51478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031804,"nanos":138195103},"http":{"id":"e142626e-a03e-4f58-bf77-71939d3e1597","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-u3DcKUCdcTuAaRx6_gcVI1Mwsgki3QSn2VKcPuWliwjMOElCcOv5Cg0hClfx"} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-u3DcKUCdcTuAaRx6_gcVI1Mwsgki3QSn2VKcPuWliwjMOElCcOv5Cg0hClfx\"}"} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab94a043-950b-4628-a2f2-c025c9c85318","keyName":"e2e-rate-a-0b6632","subscription":"e2e-rate-iso-a-0b6632","tenant":"e2e-shared-a-cac82f","userId":"ab94a043-950b-4628-a2f2-c025c9c85318","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\",\"requestedSubscription\":\"e2e-rate-iso-a-0b6632\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b6632","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0b6632"} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ab94a043-950b-4628-a2f2-c025c9c85318","keyName":"e2e-rate-a-0b6632","selected_subscription":"e2e-rate-iso-a-0b6632","selected_subscription_key":"ai-tenant-e2e-shared-a-cac82f/e2e-rate-iso-a-0b6632@ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b6632","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47336","PortSpecifier":{"PortValue":47336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","method":"POST","path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47336","PortSpecifier":{"PortValue":47336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031805,"nanos":204282099},"http":{"id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-u3DcKUCdcTuAaRx6_gcVI1Mwsgki3QSn2VKcPuWliwjMOElCcOv5Cg0hClfx"} {"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-u3DcKUCdcTuAaRx6_gcVI1Mwsgki3QSn2VKcPuWliwjMOElCcOv5Cg0hClfx\"}"} {"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab94a043-950b-4628-a2f2-c025c9c85318","keyName":"e2e-rate-a-0b6632","subscription":"e2e-rate-iso-a-0b6632","tenant":"e2e-shared-a-cac82f","userId":"ab94a043-950b-4628-a2f2-c025c9c85318","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\",\"requestedSubscription\":\"e2e-rate-iso-a-0b6632\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b6632","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0b6632"} {"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ab94a043-950b-4628-a2f2-c025c9c85318","keyName":"e2e-rate-a-0b6632","selected_subscription":"e2e-rate-iso-a-0b6632","selected_subscription_key":"ai-tenant-e2e-shared-a-cac82f/e2e-rate-iso-a-0b6632@ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b6632","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47342","PortSpecifier":{"PortValue":47342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","method":"POST","path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47342","PortSpecifier":{"PortValue":47342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031806,"nanos":245237714},"http":{"id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-u3DcKUCdcTuAaRx6_gcVI1Mwsgki3QSn2VKcPuWliwjMOElCcOv5Cg0hClfx"} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-u3DcKUCdcTuAaRx6_gcVI1Mwsgki3QSn2VKcPuWliwjMOElCcOv5Cg0hClfx\"}"} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab94a043-950b-4628-a2f2-c025c9c85318","keyName":"e2e-rate-a-0b6632","subscription":"e2e-rate-iso-a-0b6632","tenant":"e2e-shared-a-cac82f","userId":"ab94a043-950b-4628-a2f2-c025c9c85318","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\",\"requestedSubscription\":\"e2e-rate-iso-a-0b6632\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b6632","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0b6632"} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ab94a043-950b-4628-a2f2-c025c9c85318","keyName":"e2e-rate-a-0b6632","selected_subscription":"e2e-rate-iso-a-0b6632","selected_subscription_key":"ai-tenant-e2e-shared-a-cac82f/e2e-rate-iso-a-0b6632@ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b6632","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44678","PortSpecifier":{"PortValue":44678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","method":"POST","path":"/ai-tenant-e2e-shared-b-480a7f/rate-test-model-480a7f/v1/completions","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44678","PortSpecifier":{"PortValue":44678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031806,"nanos":280369586},"http":{"id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","method":"POST","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-480a7f/rate-test-model-480a7f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kh0lIpHPeIzS85bR_hv0BizXvYUyXv8jorWaJPZyCbUd1SzJ7VLT1G56YbeG"} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-480a7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kh0lIpHPeIzS85bR_hv0BizXvYUyXv8jorWaJPZyCbUd1SzJ7VLT1G56YbeG\"}"} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-480a7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f620d464-4870-46b8-9605-52a63eaabacb","keyName":"e2e-rate-b-0b6632","subscription":"e2e-rate-iso-b-0b6632","tenant":"e2e-shared-b-480a7f","userId":"f620d464-4870-46b8-9605-52a63eaabacb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-480a7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-480a7f/rate-test-model-480a7f\",\"requestedSubscription\":\"e2e-rate-iso-b-0b6632\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-480a7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-480a7f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0b6632","namespace":"ai-tenant-e2e-shared-b-480a7f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/rate-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-0b6632"} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f620d464-4870-46b8-9605-52a63eaabacb","keyName":"e2e-rate-b-0b6632","selected_subscription":"e2e-rate-iso-b-0b6632","selected_subscription_key":"ai-tenant-e2e-shared-b-480a7f/e2e-rate-iso-b-0b6632@ai-tenant-e2e-shared-b-480a7f/rate-test-model-480a7f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-480a7f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0b6632","namespace":"ai-tenant-e2e-shared-b-480a7f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T12:23:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"} {"level":"info","ts":"2026-07-14T12:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"} {"level":"info","ts":"2026-07-14T12:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"} {"level":"info","ts":"2026-07-14T12:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746"} {"level":"info","ts":"2026-07-14T12:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"} {"level":"info","ts":"2026-07-14T12:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c"} {"level":"info","ts":"2026-07-14T12:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"} {"level":"info","ts":"2026-07-14T12:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719"} {"level":"info","ts":"2026-07-14T12:23:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5"} {"level":"info","ts":"2026-07-14T12:23:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb"} {"level":"info","ts":"2026-07-14T12:23:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f134ab97591fac1ea052e70cc7ab075a22720d0844a52937d924c33e5508df8f"} {"level":"info","ts":"2026-07-14T12:23:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e"} {"level":"info","ts":"2026-07-14T12:23:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"} {"level":"info","ts":"2026-07-14T12:23:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e"} {"level":"info","ts":"2026-07-14T12:23:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b91180686a4a458380efe4902cb5cf9185aa70e074897f48afd9e76beba438f3"} {"level":"info","ts":"2026-07-14T12:23:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f"} {"level":"info","ts":"2026-07-14T12:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"} {"level":"info","ts":"2026-07-14T12:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5"} {"level":"info","ts":"2026-07-14T12:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92"} {"level":"info","ts":"2026-07-14T12:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e"} {"level":"info","ts":"2026-07-14T12:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"} {"level":"info","ts":"2026-07-14T12:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c"} {"level":"info","ts":"2026-07-14T12:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"} {"level":"info","ts":"2026-07-14T12:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"}