--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-21T04:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d071035-4fc2-456a-8e55-749ce8308821","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d071035-4fc2-456a-8e55-749ce8308821","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:49:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a183a99-4102-474e-aecd-af2f4ddcbbc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57540","PortSpecifier":{"PortValue":57540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a183a99-4102-474e-aecd-af2f4ddcbbc9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:49:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a183a99-4102-474e-aecd-af2f4ddcbbc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57540","PortSpecifier":{"PortValue":57540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609370,"nanos":271974935},"http":{"id":"3a183a99-4102-474e-aecd-af2f4ddcbbc9","method":"GET","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:49:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a183a99-4102-474e-aecd-af2f4ddcbbc9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4jkoyhEicyGQ4x9Q_kME2X3uEW35XHl4l3Wyt054K4MN80P5JesINeG2EtC0"} {"level":"debug","ts":"2026-07-21T04:49:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a183a99-4102-474e-aecd-af2f4ddcbbc9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4jkoyhEicyGQ4x9Q_kME2X3uEW35XHl4l3Wyt054K4MN80P5JesINeG2EtC0\"}"} {"level":"debug","ts":"2026-07-21T04:49:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a183a99-4102-474e-aecd-af2f4ddcbbc9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75c27733-75e0-451a-8e4d-6c7169d57e08","keyName":"e2e-auth-iso-a-3b0b2e","subscription":"e2e-auth-iso-e22741","tenant":"e2e-shared-a-e19fee","userId":"75c27733-75e0-451a-8e4d-6c7169d57e08","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T04:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a183a99-4102-474e-aecd-af2f4ddcbbc9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a183a99-4102-474e-aecd-af2f4ddcbbc9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a183a99-4102-474e-aecd-af2f4ddcbbc9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a183a99-4102-474e-aecd-af2f4ddcbbc9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/auth-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3a183a99-4102-474e-aecd-af2f4ddcbbc9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T04:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a183a99-4102-474e-aecd-af2f4ddcbbc9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a183a99-4102-474e-aecd-af2f4ddcbbc9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e22741"} {"level":"debug","ts":"2026-07-21T04:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a183a99-4102-474e-aecd-af2f4ddcbbc9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T04:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a183a99-4102-474e-aecd-af2f4ddcbbc9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a183a99-4102-474e-aecd-af2f4ddcbbc9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"info","ts":"2026-07-21T04:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"info","ts":"2026-07-21T04:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"info","ts":"2026-07-21T04:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"info","ts":"2026-07-21T04:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"error","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"error","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"error","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"error","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"error","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:49:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"error","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9d89887-5c9d-4f25-83ee-264190df9902","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50276","PortSpecifier":{"PortValue":50276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9d89887-5c9d-4f25-83ee-264190df9902","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9d89887-5c9d-4f25-83ee-264190df9902","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50276","PortSpecifier":{"PortValue":50276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609389,"nanos":624078540},"http":{"id":"f9d89887-5c9d-4f25-83ee-264190df9902","method":"POST","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f9d89887-5c9d-4f25-83ee-264190df9902","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9d89887-5c9d-4f25-83ee-264190df9902","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9d89887-5c9d-4f25-83ee-264190df9902","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9d89887-5c9d-4f25-83ee-264190df9902","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9d89887-5c9d-4f25-83ee-264190df9902","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9d89887-5c9d-4f25-83ee-264190df9902","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/auth-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f9d89887-5c9d-4f25-83ee-264190df9902","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9d89887-5c9d-4f25-83ee-264190df9902","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9d89887-5c9d-4f25-83ee-264190df9902","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9d89887-5c9d-4f25-83ee-264190df9902","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9d89887-5c9d-4f25-83ee-264190df9902","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e68f854a-0cc4-440c-983e-42a619e48024","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58618","PortSpecifier":{"PortValue":58618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e68f854a-0cc4-440c-983e-42a619e48024","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e68f854a-0cc4-440c-983e-42a619e48024","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58618","PortSpecifier":{"PortValue":58618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609389,"nanos":665466572},"http":{"id":"e68f854a-0cc4-440c-983e-42a619e48024","method":"POST","headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e68f854a-0cc4-440c-983e-42a619e48024","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e68f854a-0cc4-440c-983e-42a619e48024","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e68f854a-0cc4-440c-983e-42a619e48024","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e68f854a-0cc4-440c-983e-42a619e48024","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e68f854a-0cc4-440c-983e-42a619e48024","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e68f854a-0cc4-440c-983e-42a619e48024","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfd2ba/auth-test-model-cfd2ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfd2ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e68f854a-0cc4-440c-983e-42a619e48024","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e68f854a-0cc4-440c-983e-42a619e48024","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e68f854a-0cc4-440c-983e-42a619e48024","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e68f854a-0cc4-440c-983e-42a619e48024","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e68f854a-0cc4-440c-983e-42a619e48024","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1d4915c-0f61-4205-976f-a2a491f9ce11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58634","PortSpecifier":{"PortValue":58634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1d4915c-0f61-4205-976f-a2a491f9ce11","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1d4915c-0f61-4205-976f-a2a491f9ce11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58634","PortSpecifier":{"PortValue":58634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609389,"nanos":701417351},"http":{"id":"c1d4915c-0f61-4205-976f-a2a491f9ce11","method":"GET","headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1d4915c-0f61-4205-976f-a2a491f9ce11","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Flczd8bz0ZlGwxVX_TXHlPmwrcZW20KEHOELUK2xYx4ONX75xcLkxspNpeL5"} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1d4915c-0f61-4205-976f-a2a491f9ce11","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-cfd2ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Flczd8bz0ZlGwxVX_TXHlPmwrcZW20KEHOELUK2xYx4ONX75xcLkxspNpeL5\"}"} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1d4915c-0f61-4205-976f-a2a491f9ce11","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cfd2ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1d4915c-0f61-4205-976f-a2a491f9ce11","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1d4915c-0f61-4205-976f-a2a491f9ce11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"c1d4915c-0f61-4205-976f-a2a491f9ce11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1d4915c-0f61-4205-976f-a2a491f9ce11","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-21T04:49:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1d4915c-0f61-4205-976f-a2a491f9ce11","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-21T04:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"info","ts":"2026-07-21T04:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"info","ts":"2026-07-21T04:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"info","ts":"2026-07-21T04:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"debug","ts":"2026-07-21T04:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"info","ts":"2026-07-21T04:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1cfadf0-785c-4a89-8639-e3af739319d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37970","PortSpecifier":{"PortValue":37970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1cfadf0-785c-4a89-8639-e3af739319d0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1cfadf0-785c-4a89-8639-e3af739319d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37970","PortSpecifier":{"PortValue":37970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609404,"nanos":958029309},"http":{"id":"a1cfadf0-785c-4a89-8639-e3af739319d0","method":"POST","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a1cfadf0-785c-4a89-8639-e3af739319d0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:50:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1cfadf0-785c-4a89-8639-e3af739319d0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1cfadf0-785c-4a89-8639-e3af739319d0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1cfadf0-785c-4a89-8639-e3af739319d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1cfadf0-785c-4a89-8639-e3af739319d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1cfadf0-785c-4a89-8639-e3af739319d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/auth-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a1cfadf0-785c-4a89-8639-e3af739319d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1cfadf0-785c-4a89-8639-e3af739319d0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1cfadf0-785c-4a89-8639-e3af739319d0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T04:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1cfadf0-785c-4a89-8639-e3af739319d0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1cfadf0-785c-4a89-8639-e3af739319d0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"639ea466-f635-4670-9fe1-b70722813622","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56908","PortSpecifier":{"PortValue":56908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"639ea466-f635-4670-9fe1-b70722813622","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"639ea466-f635-4670-9fe1-b70722813622","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56908","PortSpecifier":{"PortValue":56908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609404,"nanos":999050718},"http":{"id":"639ea466-f635-4670-9fe1-b70722813622","method":"POST","headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"639ea466-f635-4670-9fe1-b70722813622","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"639ea466-f635-4670-9fe1-b70722813622","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"639ea466-f635-4670-9fe1-b70722813622","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"639ea466-f635-4670-9fe1-b70722813622","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"639ea466-f635-4670-9fe1-b70722813622","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"639ea466-f635-4670-9fe1-b70722813622","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfd2ba/auth-test-model-cfd2ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfd2ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"639ea466-f635-4670-9fe1-b70722813622","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"639ea466-f635-4670-9fe1-b70722813622","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"639ea466-f635-4670-9fe1-b70722813622","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"639ea466-f635-4670-9fe1-b70722813622","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"639ea466-f635-4670-9fe1-b70722813622","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c6d9aa5-d677-42e5-a3f6-1316709a9011","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37980","PortSpecifier":{"PortValue":37980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c6d9aa5-d677-42e5-a3f6-1316709a9011","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c6d9aa5-d677-42e5-a3f6-1316709a9011","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37980","PortSpecifier":{"PortValue":37980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609405,"nanos":43192983},"http":{"id":"7c6d9aa5-d677-42e5-a3f6-1316709a9011","method":"POST","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c6d9aa5-d677-42e5-a3f6-1316709a9011","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c6d9aa5-d677-42e5-a3f6-1316709a9011","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c6d9aa5-d677-42e5-a3f6-1316709a9011","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c6d9aa5-d677-42e5-a3f6-1316709a9011","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c6d9aa5-d677-42e5-a3f6-1316709a9011","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c6d9aa5-d677-42e5-a3f6-1316709a9011","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/auth-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c6d9aa5-d677-42e5-a3f6-1316709a9011","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c6d9aa5-d677-42e5-a3f6-1316709a9011","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c6d9aa5-d677-42e5-a3f6-1316709a9011","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c6d9aa5-d677-42e5-a3f6-1316709a9011","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c6d9aa5-d677-42e5-a3f6-1316709a9011","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"478249f3-f28e-4567-ae83-dfdec04678c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56912","PortSpecifier":{"PortValue":56912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"478249f3-f28e-4567-ae83-dfdec04678c4","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"478249f3-f28e-4567-ae83-dfdec04678c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56912","PortSpecifier":{"PortValue":56912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609405,"nanos":85747250},"http":{"id":"478249f3-f28e-4567-ae83-dfdec04678c4","method":"POST","headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"478249f3-f28e-4567-ae83-dfdec04678c4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"478249f3-f28e-4567-ae83-dfdec04678c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"478249f3-f28e-4567-ae83-dfdec04678c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"478249f3-f28e-4567-ae83-dfdec04678c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"478249f3-f28e-4567-ae83-dfdec04678c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"478249f3-f28e-4567-ae83-dfdec04678c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfd2ba/auth-test-model-cfd2ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfd2ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"478249f3-f28e-4567-ae83-dfdec04678c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"478249f3-f28e-4567-ae83-dfdec04678c4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"478249f3-f28e-4567-ae83-dfdec04678c4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"478249f3-f28e-4567-ae83-dfdec04678c4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:50:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"478249f3-f28e-4567-ae83-dfdec04678c4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"info","ts":"2026-07-21T04:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"info","ts":"2026-07-21T04:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"info","ts":"2026-07-21T04:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"debug","ts":"2026-07-21T04:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"error","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"error","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"error","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"error","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62b3dd1e-fa58-4ea4-847a-6a3e1a8f7362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37018","PortSpecifier":{"PortValue":37018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62b3dd1e-fa58-4ea4-847a-6a3e1a8f7362","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62b3dd1e-fa58-4ea4-847a-6a3e1a8f7362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37018","PortSpecifier":{"PortValue":37018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609420,"nanos":313389076},"http":{"id":"62b3dd1e-fa58-4ea4-847a-6a3e1a8f7362","method":"POST","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"62b3dd1e-fa58-4ea4-847a-6a3e1a8f7362","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62b3dd1e-fa58-4ea4-847a-6a3e1a8f7362","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62b3dd1e-fa58-4ea4-847a-6a3e1a8f7362","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62b3dd1e-fa58-4ea4-847a-6a3e1a8f7362","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62b3dd1e-fa58-4ea4-847a-6a3e1a8f7362","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62b3dd1e-fa58-4ea4-847a-6a3e1a8f7362","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/auth-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"62b3dd1e-fa58-4ea4-847a-6a3e1a8f7362","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62b3dd1e-fa58-4ea4-847a-6a3e1a8f7362","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62b3dd1e-fa58-4ea4-847a-6a3e1a8f7362","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62b3dd1e-fa58-4ea4-847a-6a3e1a8f7362","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62b3dd1e-fa58-4ea4-847a-6a3e1a8f7362","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3182691c-6d18-47d6-a33f-11639103c71e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50902","PortSpecifier":{"PortValue":50902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3182691c-6d18-47d6-a33f-11639103c71e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3182691c-6d18-47d6-a33f-11639103c71e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50902","PortSpecifier":{"PortValue":50902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609420,"nanos":350516629},"http":{"id":"3182691c-6d18-47d6-a33f-11639103c71e","method":"POST","headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3182691c-6d18-47d6-a33f-11639103c71e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3182691c-6d18-47d6-a33f-11639103c71e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3182691c-6d18-47d6-a33f-11639103c71e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3182691c-6d18-47d6-a33f-11639103c71e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3182691c-6d18-47d6-a33f-11639103c71e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3182691c-6d18-47d6-a33f-11639103c71e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfd2ba/auth-test-model-cfd2ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfd2ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3182691c-6d18-47d6-a33f-11639103c71e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3182691c-6d18-47d6-a33f-11639103c71e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3182691c-6d18-47d6-a33f-11639103c71e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3182691c-6d18-47d6-a33f-11639103c71e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3182691c-6d18-47d6-a33f-11639103c71e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4c2f825-9268-47c9-89df-17080e99ed2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50906","PortSpecifier":{"PortValue":50906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b4c2f825-9268-47c9-89df-17080e99ed2c","method":"GET","path":"/maas-api/v1/api-keys/c19817dd-7389-4e67-96a3-835216a13c0f","host":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4c2f825-9268-47c9-89df-17080e99ed2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50906","PortSpecifier":{"PortValue":50906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609420,"nanos":389023461},"http":{"id":"b4c2f825-9268-47c9-89df-17080e99ed2c","method":"GET","headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c19817dd-7389-4e67-96a3-835216a13c0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b4c2f825-9268-47c9-89df-17080e99ed2c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b4c2f825-9268-47c9-89df-17080e99ed2c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b4c2f825-9268-47c9-89df-17080e99ed2c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c19817dd-7389-4e67-96a3-835216a13c0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4c2f825-9268-47c9-89df-17080e99ed2c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4c2f825-9268-47c9-89df-17080e99ed2c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4c2f825-9268-47c9-89df-17080e99ed2c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfd2ba/auth-test-model-cfd2ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfd2ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b4c2f825-9268-47c9-89df-17080e99ed2c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4c2f825-9268-47c9-89df-17080e99ed2c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4c2f825-9268-47c9-89df-17080e99ed2c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4c2f825-9268-47c9-89df-17080e99ed2c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4c2f825-9268-47c9-89df-17080e99ed2c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b64db05-f9a6-473e-8fa6-edc23a12e7ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37032","PortSpecifier":{"PortValue":37032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b64db05-f9a6-473e-8fa6-edc23a12e7ee","method":"GET","path":"/maas-api/v1/api-keys/c19817dd-7389-4e67-96a3-835216a13c0f","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b64db05-f9a6-473e-8fa6-edc23a12e7ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37032","PortSpecifier":{"PortValue":37032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609420,"nanos":422362007},"http":{"id":"6b64db05-f9a6-473e-8fa6-edc23a12e7ee","method":"GET","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c19817dd-7389-4e67-96a3-835216a13c0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b64db05-f9a6-473e-8fa6-edc23a12e7ee","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b64db05-f9a6-473e-8fa6-edc23a12e7ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b64db05-f9a6-473e-8fa6-edc23a12e7ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c19817dd-7389-4e67-96a3-835216a13c0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b64db05-f9a6-473e-8fa6-edc23a12e7ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b64db05-f9a6-473e-8fa6-edc23a12e7ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b64db05-f9a6-473e-8fa6-edc23a12e7ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/auth-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b64db05-f9a6-473e-8fa6-edc23a12e7ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b64db05-f9a6-473e-8fa6-edc23a12e7ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b64db05-f9a6-473e-8fa6-edc23a12e7ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b64db05-f9a6-473e-8fa6-edc23a12e7ee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:50:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b64db05-f9a6-473e-8fa6-edc23a12e7ee","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"info","ts":"2026-07-21T04:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"info","ts":"2026-07-21T04:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"info","ts":"2026-07-21T04:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"error","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"error","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"error","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"info","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:50:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:50:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"info","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f759e15-8b31-4459-90b2-6997d28a4f31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52532","PortSpecifier":{"PortValue":52532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f759e15-8b31-4459-90b2-6997d28a4f31","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f759e15-8b31-4459-90b2-6997d28a4f31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52532","PortSpecifier":{"PortValue":52532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609435,"nanos":743093156},"http":{"id":"2f759e15-8b31-4459-90b2-6997d28a4f31","method":"POST","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f759e15-8b31-4459-90b2-6997d28a4f31","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f759e15-8b31-4459-90b2-6997d28a4f31","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f759e15-8b31-4459-90b2-6997d28a4f31","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f759e15-8b31-4459-90b2-6997d28a4f31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f759e15-8b31-4459-90b2-6997d28a4f31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f759e15-8b31-4459-90b2-6997d28a4f31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/auth-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f759e15-8b31-4459-90b2-6997d28a4f31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f759e15-8b31-4459-90b2-6997d28a4f31","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f759e15-8b31-4459-90b2-6997d28a4f31","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f759e15-8b31-4459-90b2-6997d28a4f31","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f759e15-8b31-4459-90b2-6997d28a4f31","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0f652a3-2f4d-4c1f-b7db-b2c1da97f04f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42624","PortSpecifier":{"PortValue":42624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0f652a3-2f4d-4c1f-b7db-b2c1da97f04f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0f652a3-2f4d-4c1f-b7db-b2c1da97f04f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42624","PortSpecifier":{"PortValue":42624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609435,"nanos":785753581},"http":{"id":"d0f652a3-2f4d-4c1f-b7db-b2c1da97f04f","method":"POST","headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d0f652a3-2f4d-4c1f-b7db-b2c1da97f04f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0f652a3-2f4d-4c1f-b7db-b2c1da97f04f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0f652a3-2f4d-4c1f-b7db-b2c1da97f04f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0f652a3-2f4d-4c1f-b7db-b2c1da97f04f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0f652a3-2f4d-4c1f-b7db-b2c1da97f04f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0f652a3-2f4d-4c1f-b7db-b2c1da97f04f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfd2ba/auth-test-model-cfd2ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfd2ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d0f652a3-2f4d-4c1f-b7db-b2c1da97f04f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0f652a3-2f4d-4c1f-b7db-b2c1da97f04f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0f652a3-2f4d-4c1f-b7db-b2c1da97f04f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0f652a3-2f4d-4c1f-b7db-b2c1da97f04f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0f652a3-2f4d-4c1f-b7db-b2c1da97f04f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9553a42-6c0c-4170-b7e1-ccb83ae0da66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52544","PortSpecifier":{"PortValue":52544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9553a42-6c0c-4170-b7e1-ccb83ae0da66","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9553a42-6c0c-4170-b7e1-ccb83ae0da66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52544","PortSpecifier":{"PortValue":52544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609435,"nanos":826569567},"http":{"id":"c9553a42-6c0c-4170-b7e1-ccb83ae0da66","method":"POST","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9553a42-6c0c-4170-b7e1-ccb83ae0da66","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XYZgswMMnBBF5hMZ_K1VGZNDW8BcUSPs5HXVu3N7UVd841Tk7mbYCOawxzlP"} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9553a42-6c0c-4170-b7e1-ccb83ae0da66","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XYZgswMMnBBF5hMZ_K1VGZNDW8BcUSPs5HXVu3N7UVd841Tk7mbYCOawxzlP\"}"} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9553a42-6c0c-4170-b7e1-ccb83ae0da66","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"47be4b83-3cf9-44e9-b0e5-63ca3fac2dac","keyName":"e2e-auth-iso-a-1f766e","subscription":"e2e-auth-iso-c42231","tenant":"e2e-shared-a-e19fee","userId":"47be4b83-3cf9-44e9-b0e5-63ca3fac2dac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9553a42-6c0c-4170-b7e1-ccb83ae0da66","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9553a42-6c0c-4170-b7e1-ccb83ae0da66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9553a42-6c0c-4170-b7e1-ccb83ae0da66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9553a42-6c0c-4170-b7e1-ccb83ae0da66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/auth-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9553a42-6c0c-4170-b7e1-ccb83ae0da66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9553a42-6c0c-4170-b7e1-ccb83ae0da66","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9553a42-6c0c-4170-b7e1-ccb83ae0da66","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9553a42-6c0c-4170-b7e1-ccb83ae0da66","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-c42231"} {"level":"info","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9553a42-6c0c-4170-b7e1-ccb83ae0da66","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:50:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9553a42-6c0c-4170-b7e1-ccb83ae0da66","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:50:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c"} {"level":"info","ts":"2026-07-21T04:50:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa83c958dbf791203320e14da2c85410a9fdef4d492d7d98a2399f5f51ed2ac0"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c910149a452337d0db7430536269cb718de1cdf8f6d3d6aee45833f1e80a09d"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8c5688a5f6b211de159ab481b5c189b1c322c23a0d894fc55730211affbd4f7"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c11e4be1579302025d17942d5519ab6f9425dd9702d91d6283233a8b847fbfa"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0c1851a5e8531b92a63d2a576acf5f365b4d1c03d0b2b0fb5df4374d526a2c4"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/914bb59c20abb6e554c86645dfdc38185108b740eae309b15619337334679ada"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ac260180dce152d68d24fd9cfd81befc1f48bc2b1bb234441e03b1ee9cffc88"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3712a5a040844ff35ae3a910ad7594823e5e4f5e8806c67ed347d96c18689b29"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4aa5b86325997d695153c7d21ca899787f6153f31e641fb501a7280a63431227"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c565d2f49d987b0ec6e103e3824c00a588c2442e294c5473f267502ae8496136"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70a5a7bddb618e634cb5ea36a4ccdde6d1f5bc368c60070b2ddeed929d9e4f28"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13f6616aec2452bef8cd5500fd43d04921f502e668d1757786f7eab30211513e"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c92be54a9d24a338aba6f628be31c51e11b00091cf4d5a4f92e7a74bb5eb081f"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5ce06a97f42583e1acf885daf35a32ecd0b870bbdb3fbcc79a9e5af899fbfef"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63cfe79840b579bf1613a552203d3d6e932423073ee9b5bed8af7c781efda482"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496"} {"level":"info","ts":"2026-07-21T04:50:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02ee4b1f5333bbcf16dadd680710c221216c93839377c9ef5486b4831ccc043b"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"407b4b908a731a38e1f6cb1501017049046784728464b7810261df6505331993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"407b4b908a731a38e1f6cb1501017049046784728464b7810261df6505331993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407b4b908a731a38e1f6cb1501017049046784728464b7810261df6505331993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407b4b908a731a38e1f6cb1501017049046784728464b7810261df6505331993","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407b4b908a731a38e1f6cb1501017049046784728464b7810261df6505331993"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407b4b908a731a38e1f6cb1501017049046784728464b7810261df6505331993","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407b4b908a731a38e1f6cb1501017049046784728464b7810261df6505331993"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"407b4b908a731a38e1f6cb1501017049046784728464b7810261df6505331993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["407b4b908a731a38e1f6cb1501017049046784728464b7810261df6505331993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"407b4b908a731a38e1f6cb1501017049046784728464b7810261df6505331993","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407b4b908a731a38e1f6cb1501017049046784728464b7810261df6505331993","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407b4b908a731a38e1f6cb1501017049046784728464b7810261df6505331993"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5fff6ef9cd40bb7ffc3833921806962da3d8743bbc0ca045bcd869d803b2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5fff6ef9cd40bb7ffc3833921806962da3d8743bbc0ca045bcd869d803b2ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5fff6ef9cd40bb7ffc3833921806962da3d8743bbc0ca045bcd869d803b2ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5fff6ef9cd40bb7ffc3833921806962da3d8743bbc0ca045bcd869d803b2ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5fff6ef9cd40bb7ffc3833921806962da3d8743bbc0ca045bcd869d803b2ad"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5fff6ef9cd40bb7ffc3833921806962da3d8743bbc0ca045bcd869d803b2ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5fff6ef9cd40bb7ffc3833921806962da3d8743bbc0ca045bcd869d803b2ad"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5fff6ef9cd40bb7ffc3833921806962da3d8743bbc0ca045bcd869d803b2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e5fff6ef9cd40bb7ffc3833921806962da3d8743bbc0ca045bcd869d803b2ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5fff6ef9cd40bb7ffc3833921806962da3d8743bbc0ca045bcd869d803b2ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5fff6ef9cd40bb7ffc3833921806962da3d8743bbc0ca045bcd869d803b2ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5fff6ef9cd40bb7ffc3833921806962da3d8743bbc0ca045bcd869d803b2ad"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c"} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af"} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c"} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af"} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af"} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f"} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f"} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c"} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f"} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c"} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f"} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c"} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e"} {"level":"error","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f"} {"level":"error","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c"} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8"} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496"} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8"} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be4a137805b1b7201664c1fe017487337dfd8242330ca63aeaa4e82b9a469ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be4a137805b1b7201664c1fe017487337dfd8242330ca63aeaa4e82b9a469ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63439f6ee7efc4b208f77993ca431944826b995773a0861cdc32367c4527e488","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be4a137805b1b7201664c1fe017487337dfd8242330ca63aeaa4e82b9a469ef0"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63439f6ee7efc4b208f77993ca431944826b995773a0861cdc32367c4527e488","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be4a137805b1b7201664c1fe017487337dfd8242330ca63aeaa4e82b9a469ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be4a137805b1b7201664c1fe017487337dfd8242330ca63aeaa4e82b9a469ef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63439f6ee7efc4b208f77993ca431944826b995773a0861cdc32367c4527e488"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be4a137805b1b7201664c1fe017487337dfd8242330ca63aeaa4e82b9a469ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63439f6ee7efc4b208f77993ca431944826b995773a0861cdc32367c4527e488","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63439f6ee7efc4b208f77993ca431944826b995773a0861cdc32367c4527e488"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63439f6ee7efc4b208f77993ca431944826b995773a0861cdc32367c4527e488","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be4a137805b1b7201664c1fe017487337dfd8242330ca63aeaa4e82b9a469ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be4a137805b1b7201664c1fe017487337dfd8242330ca63aeaa4e82b9a469ef0"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be4a137805b1b7201664c1fe017487337dfd8242330ca63aeaa4e82b9a469ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63439f6ee7efc4b208f77993ca431944826b995773a0861cdc32367c4527e488"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98f160623170afa08bfacbe93571fd66e964ca42fffef9b42d1b64c222dec9ab"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63439f6ee7efc4b208f77993ca431944826b995773a0861cdc32367c4527e488","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98f160623170afa08bfacbe93571fd66e964ca42fffef9b42d1b64c222dec9ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98f160623170afa08bfacbe93571fd66e964ca42fffef9b42d1b64c222dec9ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be4a137805b1b7201664c1fe017487337dfd8242330ca63aeaa4e82b9a469ef0"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98f160623170afa08bfacbe93571fd66e964ca42fffef9b42d1b64c222dec9ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0e23c8fda2af4da5e9548e1433dda431c84874a574148fd9bd55d46fd6050c3"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be4a137805b1b7201664c1fe017487337dfd8242330ca63aeaa4e82b9a469ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be4a137805b1b7201664c1fe017487337dfd8242330ca63aeaa4e82b9a469ef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e55dfc5c80b86d456d07ecff7376eea6a0afc3cb8c4671e604b6bb3a68a9c53"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98f160623170afa08bfacbe93571fd66e964ca42fffef9b42d1b64c222dec9ab"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be4a137805b1b7201664c1fe017487337dfd8242330ca63aeaa4e82b9a469ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c0c646565dffb9e295cac7bc60dfc09186d9444a639bb07cc522540ee0d0fa"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fece7a6e23c0d14904484451e93cd370aaff4592f34ae917861d1c557160656"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0e23c8fda2af4da5e9548e1433dda431c84874a574148fd9bd55d46fd6050c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0e23c8fda2af4da5e9548e1433dda431c84874a574148fd9bd55d46fd6050c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6deb8cb3114a49a94c9ba3a276cc7931882324342582c50d7f1708d535663a1"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5727e402717cf4881b6ef0031f074b4981c32faece6795029dbfe033c0a90ac8"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0e23c8fda2af4da5e9548e1433dda431c84874a574148fd9bd55d46fd6050c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e55dfc5c80b86d456d07ecff7376eea6a0afc3cb8c4671e604b6bb3a68a9c53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e55dfc5c80b86d456d07ecff7376eea6a0afc3cb8c4671e604b6bb3a68a9c53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be4a137805b1b7201664c1fe017487337dfd8242330ca63aeaa4e82b9a469ef0"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e55dfc5c80b86d456d07ecff7376eea6a0afc3cb8c4671e604b6bb3a68a9c53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98f160623170afa08bfacbe93571fd66e964ca42fffef9b42d1b64c222dec9ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0e23c8fda2af4da5e9548e1433dda431c84874a574148fd9bd55d46fd6050c3"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e55dfc5c80b86d456d07ecff7376eea6a0afc3cb8c4671e604b6bb3a68a9c53"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c0c646565dffb9e295cac7bc60dfc09186d9444a639bb07cc522540ee0d0fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6c0c646565dffb9e295cac7bc60dfc09186d9444a639bb07cc522540ee0d0fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c0c646565dffb9e295cac7bc60dfc09186d9444a639bb07cc522540ee0d0fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fece7a6e23c0d14904484451e93cd370aaff4592f34ae917861d1c557160656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fece7a6e23c0d14904484451e93cd370aaff4592f34ae917861d1c557160656"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c0c646565dffb9e295cac7bc60dfc09186d9444a639bb07cc522540ee0d0fa"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fece7a6e23c0d14904484451e93cd370aaff4592f34ae917861d1c557160656","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6deb8cb3114a49a94c9ba3a276cc7931882324342582c50d7f1708d535663a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6deb8cb3114a49a94c9ba3a276cc7931882324342582c50d7f1708d535663a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fece7a6e23c0d14904484451e93cd370aaff4592f34ae917861d1c557160656"} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6deb8cb3114a49a94c9ba3a276cc7931882324342582c50d7f1708d535663a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5727e402717cf4881b6ef0031f074b4981c32faece6795029dbfe033c0a90ac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5727e402717cf4881b6ef0031f074b4981c32faece6795029dbfe033c0a90ac8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6deb8cb3114a49a94c9ba3a276cc7931882324342582c50d7f1708d535663a1"} {"level":"info","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5727e402717cf4881b6ef0031f074b4981c32faece6795029dbfe033c0a90ac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be4a137805b1b7201664c1fe017487337dfd8242330ca63aeaa4e82b9a469ef0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5727e402717cf4881b6ef0031f074b4981c32faece6795029dbfe033c0a90ac8"} {"level":"info","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0e23c8fda2af4da5e9548e1433dda431c84874a574148fd9bd55d46fd6050c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e55dfc5c80b86d456d07ecff7376eea6a0afc3cb8c4671e604b6bb3a68a9c53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c0c646565dffb9e295cac7bc60dfc09186d9444a639bb07cc522540ee0d0fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fece7a6e23c0d14904484451e93cd370aaff4592f34ae917861d1c557160656","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6deb8cb3114a49a94c9ba3a276cc7931882324342582c50d7f1708d535663a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5727e402717cf4881b6ef0031f074b4981c32faece6795029dbfe033c0a90ac8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed"} {"level":"info","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed"} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:51:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:51:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed"} {"level":"info","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed"} {"level":"info","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:51:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:51:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed"} {"level":"error","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beef88c8-cd66-48a3-8df9-6c5dc2f85e32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37834","PortSpecifier":{"PortValue":37834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"beef88c8-cd66-48a3-8df9-6c5dc2f85e32","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beef88c8-cd66-48a3-8df9-6c5dc2f85e32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37834","PortSpecifier":{"PortValue":37834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609515,"nanos":466268284},"http":{"id":"beef88c8-cd66-48a3-8df9-6c5dc2f85e32","method":"POST","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"beef88c8-cd66-48a3-8df9-6c5dc2f85e32","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"beef88c8-cd66-48a3-8df9-6c5dc2f85e32","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"beef88c8-cd66-48a3-8df9-6c5dc2f85e32","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beef88c8-cd66-48a3-8df9-6c5dc2f85e32","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beef88c8-cd66-48a3-8df9-6c5dc2f85e32","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beef88c8-cd66-48a3-8df9-6c5dc2f85e32","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/sub-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"beef88c8-cd66-48a3-8df9-6c5dc2f85e32","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beef88c8-cd66-48a3-8df9-6c5dc2f85e32","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beef88c8-cd66-48a3-8df9-6c5dc2f85e32","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beef88c8-cd66-48a3-8df9-6c5dc2f85e32","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beef88c8-cd66-48a3-8df9-6c5dc2f85e32","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc044596-d970-4991-a941-195bfdaea24f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57150","PortSpecifier":{"PortValue":57150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc044596-d970-4991-a941-195bfdaea24f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc044596-d970-4991-a941-195bfdaea24f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57150","PortSpecifier":{"PortValue":57150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609515,"nanos":508180360},"http":{"id":"fc044596-d970-4991-a941-195bfdaea24f","method":"POST","headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fc044596-d970-4991-a941-195bfdaea24f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc044596-d970-4991-a941-195bfdaea24f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc044596-d970-4991-a941-195bfdaea24f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc044596-d970-4991-a941-195bfdaea24f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc044596-d970-4991-a941-195bfdaea24f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc044596-d970-4991-a941-195bfdaea24f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfd2ba/sub-test-model-cfd2ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfd2ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc044596-d970-4991-a941-195bfdaea24f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc044596-d970-4991-a941-195bfdaea24f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc044596-d970-4991-a941-195bfdaea24f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc044596-d970-4991-a941-195bfdaea24f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc044596-d970-4991-a941-195bfdaea24f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2aedf15-b0a3-4524-868f-87323bbb0c42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37846","PortSpecifier":{"PortValue":37846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2aedf15-b0a3-4524-868f-87323bbb0c42","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2aedf15-b0a3-4524-868f-87323bbb0c42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37846","PortSpecifier":{"PortValue":37846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609515,"nanos":548194025},"http":{"id":"c2aedf15-b0a3-4524-868f-87323bbb0c42","method":"GET","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2aedf15-b0a3-4524-868f-87323bbb0c42","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T6IG9FVoYv7AhySx_KzODS8BmpXsTkRlvcAWdxNo86soKM7zRMNjYtoGhNUj"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2aedf15-b0a3-4524-868f-87323bbb0c42","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T6IG9FVoYv7AhySx_KzODS8BmpXsTkRlvcAWdxNo86soKM7zRMNjYtoGhNUj\"}"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2aedf15-b0a3-4524-868f-87323bbb0c42","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63eb3438-013a-41de-9f5d-d92089c996d2","keyName":"e2e-sub-iso-ef5fee","subscription":"e2e-a-only-a232ea","tenant":"e2e-shared-a-e19fee","userId":"63eb3438-013a-41de-9f5d-d92089c996d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2aedf15-b0a3-4524-868f-87323bbb0c42","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2aedf15-b0a3-4524-868f-87323bbb0c42","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2aedf15-b0a3-4524-868f-87323bbb0c42","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2aedf15-b0a3-4524-868f-87323bbb0c42","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/sub-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2aedf15-b0a3-4524-868f-87323bbb0c42","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2aedf15-b0a3-4524-868f-87323bbb0c42","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-a232ea"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2aedf15-b0a3-4524-868f-87323bbb0c42","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2aedf15-b0a3-4524-868f-87323bbb0c42","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2aedf15-b0a3-4524-868f-87323bbb0c42","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2aedf15-b0a3-4524-868f-87323bbb0c42","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c25e3a4-4cbf-4d03-9cf0-46ff8406f508","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57154","PortSpecifier":{"PortValue":57154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c25e3a4-4cbf-4d03-9cf0-46ff8406f508","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c25e3a4-4cbf-4d03-9cf0-46ff8406f508","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57154","PortSpecifier":{"PortValue":57154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609515,"nanos":590661783},"http":{"id":"7c25e3a4-4cbf-4d03-9cf0-46ff8406f508","method":"GET","headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c25e3a4-4cbf-4d03-9cf0-46ff8406f508","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Lym7lhMgkGdnvFO4_VgqSvxY1QLcZyQ4CNfP3pp7i8NtJodlrIGoBTIFgKlE"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c25e3a4-4cbf-4d03-9cf0-46ff8406f508","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-cfd2ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Lym7lhMgkGdnvFO4_VgqSvxY1QLcZyQ4CNfP3pp7i8NtJodlrIGoBTIFgKlE\"}"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c25e3a4-4cbf-4d03-9cf0-46ff8406f508","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cfd2ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2c396a50-ad30-4686-a6d3-265832973b9c","keyName":"e2e-sub-iso-7c9b41","subscription":"e2e-b-only-a232ea","tenant":"e2e-shared-b-cfd2ba","userId":"2c396a50-ad30-4686-a6d3-265832973b9c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c25e3a4-4cbf-4d03-9cf0-46ff8406f508","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c25e3a4-4cbf-4d03-9cf0-46ff8406f508","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c25e3a4-4cbf-4d03-9cf0-46ff8406f508","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c25e3a4-4cbf-4d03-9cf0-46ff8406f508","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfd2ba/sub-test-model-cfd2ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfd2ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c25e3a4-4cbf-4d03-9cf0-46ff8406f508","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c25e3a4-4cbf-4d03-9cf0-46ff8406f508","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-a232ea"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c25e3a4-4cbf-4d03-9cf0-46ff8406f508","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c25e3a4-4cbf-4d03-9cf0-46ff8406f508","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c25e3a4-4cbf-4d03-9cf0-46ff8406f508","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:51:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c25e3a4-4cbf-4d03-9cf0-46ff8406f508","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68176364-4b9e-4738-b967-77ffe5cdf95b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59040","PortSpecifier":{"PortValue":59040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68176364-4b9e-4738-b967-77ffe5cdf95b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68176364-4b9e-4738-b967-77ffe5cdf95b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59040","PortSpecifier":{"PortValue":59040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609525,"nanos":763537343},"http":{"id":"68176364-4b9e-4738-b967-77ffe5cdf95b","method":"POST","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"68176364-4b9e-4738-b967-77ffe5cdf95b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68176364-4b9e-4738-b967-77ffe5cdf95b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68176364-4b9e-4738-b967-77ffe5cdf95b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68176364-4b9e-4738-b967-77ffe5cdf95b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68176364-4b9e-4738-b967-77ffe5cdf95b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68176364-4b9e-4738-b967-77ffe5cdf95b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/sub-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"68176364-4b9e-4738-b967-77ffe5cdf95b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68176364-4b9e-4738-b967-77ffe5cdf95b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68176364-4b9e-4738-b967-77ffe5cdf95b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68176364-4b9e-4738-b967-77ffe5cdf95b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68176364-4b9e-4738-b967-77ffe5cdf95b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"774b681e-c665-4a56-a6a4-3c8360a91cd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42816","PortSpecifier":{"PortValue":42816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"774b681e-c665-4a56-a6a4-3c8360a91cd8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"774b681e-c665-4a56-a6a4-3c8360a91cd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42816","PortSpecifier":{"PortValue":42816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609525,"nanos":805368105},"http":{"id":"774b681e-c665-4a56-a6a4-3c8360a91cd8","method":"POST","headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"774b681e-c665-4a56-a6a4-3c8360a91cd8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"774b681e-c665-4a56-a6a4-3c8360a91cd8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"774b681e-c665-4a56-a6a4-3c8360a91cd8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"774b681e-c665-4a56-a6a4-3c8360a91cd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"774b681e-c665-4a56-a6a4-3c8360a91cd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"774b681e-c665-4a56-a6a4-3c8360a91cd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfd2ba/sub-test-model-cfd2ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfd2ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"774b681e-c665-4a56-a6a4-3c8360a91cd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"774b681e-c665-4a56-a6a4-3c8360a91cd8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"774b681e-c665-4a56-a6a4-3c8360a91cd8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"774b681e-c665-4a56-a6a4-3c8360a91cd8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"774b681e-c665-4a56-a6a4-3c8360a91cd8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c4974be-67c1-4629-bcc0-d1ad795d2fab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59046","PortSpecifier":{"PortValue":59046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c4974be-67c1-4629-bcc0-d1ad795d2fab","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c4974be-67c1-4629-bcc0-d1ad795d2fab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59046","PortSpecifier":{"PortValue":59046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609525,"nanos":848499913},"http":{"id":"4c4974be-67c1-4629-bcc0-d1ad795d2fab","method":"POST","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c4974be-67c1-4629-bcc0-d1ad795d2fab","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NPeboTA5n1ZHm8Af_bfwuRMjZssOFYlP3sgALx8e46Xnx23I1KETuBM35gD1"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4c4974be-67c1-4629-bcc0-d1ad795d2fab","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NPeboTA5n1ZHm8Af_bfwuRMjZssOFYlP3sgALx8e46Xnx23I1KETuBM35gD1\"}"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4c4974be-67c1-4629-bcc0-d1ad795d2fab","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b09759e-9e91-425a-89e7-a2d916c83fb2","keyName":"e2e-sub-iso-4e7dc4","subscription":"e2e-shared-sub-02ff2e","tenant":"e2e-shared-a-e19fee","userId":"1b09759e-9e91-425a-89e7-a2d916c83fb2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c4974be-67c1-4629-bcc0-d1ad795d2fab","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c4974be-67c1-4629-bcc0-d1ad795d2fab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c4974be-67c1-4629-bcc0-d1ad795d2fab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c4974be-67c1-4629-bcc0-d1ad795d2fab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/sub-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c4974be-67c1-4629-bcc0-d1ad795d2fab","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c4974be-67c1-4629-bcc0-d1ad795d2fab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c4974be-67c1-4629-bcc0-d1ad795d2fab","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-02ff2e"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c4974be-67c1-4629-bcc0-d1ad795d2fab","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c4974be-67c1-4629-bcc0-d1ad795d2fab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c4974be-67c1-4629-bcc0-d1ad795d2fab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a6685ba-414c-46cd-8fcf-0505e5fa9432","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42818","PortSpecifier":{"PortValue":42818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a6685ba-414c-46cd-8fcf-0505e5fa9432","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a6685ba-414c-46cd-8fcf-0505e5fa9432","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42818","PortSpecifier":{"PortValue":42818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609525,"nanos":881640605},"http":{"id":"6a6685ba-414c-46cd-8fcf-0505e5fa9432","method":"POST","headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a6685ba-414c-46cd-8fcf-0505e5fa9432","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1L6kxdx3dLzLtakqm_PDvjjcnA3emVG2wegOV8A6ldJYu0OK0CQcjrPhvDODq"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a6685ba-414c-46cd-8fcf-0505e5fa9432","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-cfd2ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1L6kxdx3dLzLtakqm_PDvjjcnA3emVG2wegOV8A6ldJYu0OK0CQcjrPhvDODq\"}"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a6685ba-414c-46cd-8fcf-0505e5fa9432","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cfd2ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"343e501b-46a5-4809-9ef6-262e02c603d4","keyName":"e2e-sub-iso-ffcfa1","subscription":"e2e-shared-sub-02ff2e","tenant":"e2e-shared-b-cfd2ba","userId":"343e501b-46a5-4809-9ef6-262e02c603d4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a6685ba-414c-46cd-8fcf-0505e5fa9432","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a6685ba-414c-46cd-8fcf-0505e5fa9432","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a6685ba-414c-46cd-8fcf-0505e5fa9432","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a6685ba-414c-46cd-8fcf-0505e5fa9432","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfd2ba/sub-test-model-cfd2ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfd2ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a6685ba-414c-46cd-8fcf-0505e5fa9432","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a6685ba-414c-46cd-8fcf-0505e5fa9432","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-02ff2e"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a6685ba-414c-46cd-8fcf-0505e5fa9432","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a6685ba-414c-46cd-8fcf-0505e5fa9432","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a6685ba-414c-46cd-8fcf-0505e5fa9432","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a6685ba-414c-46cd-8fcf-0505e5fa9432","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496"} {"level":"info","ts":"2026-07-21T04:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c489596cd2b8f18cb492ed12cb86410d7c9c308256620cade2b1b778af0a72af"} {"level":"info","ts":"2026-07-21T04:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e"} {"level":"info","ts":"2026-07-21T04:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98f160623170afa08bfacbe93571fd66e964ca42fffef9b42d1b64c222dec9ab"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be4a137805b1b7201664c1fe017487337dfd8242330ca63aeaa4e82b9a469ef0"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4783a439cde3a4ec86acceadc94ee99d39aa764d398f8d4584d08948b37ed11f"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6c0c646565dffb9e295cac7bc60dfc09186d9444a639bb07cc522540ee0d0fa"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2be3b28bf72a866b1a634ee00d5e34219fa617a2020c942e4584a561f9f8a9c"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e5fff6ef9cd40bb7ffc3833921806962da3d8743bbc0ca045bcd869d803b2ad"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8edb3d4edffc97aaf0bd01c2138613642d92a9a10c07985a5e3263ff0ec242ed"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6deb8cb3114a49a94c9ba3a276cc7931882324342582c50d7f1708d535663a1"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5727e402717cf4881b6ef0031f074b4981c32faece6795029dbfe033c0a90ac8"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0e23c8fda2af4da5e9548e1433dda431c84874a574148fd9bd55d46fd6050c3"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fece7a6e23c0d14904484451e93cd370aaff4592f34ae917861d1c557160656"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2de1f125d3a5e8c3b1d1d9d86fa50bb888d2081c159cb2a65dfc5cd5d903c7f8"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63439f6ee7efc4b208f77993ca431944826b995773a0861cdc32367c4527e488"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/407b4b908a731a38e1f6cb1501017049046784728464b7810261df6505331993"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e55dfc5c80b86d456d07ecff7376eea6a0afc3cb8c4671e604b6bb3a68a9c53"} {"level":"info","ts":"2026-07-21T04:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c"} {"level":"debug","ts":"2026-07-21T04:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8ab76de188f0129b813aef55e53b771fb14f44a2a960ab48dabf0ea4c7c6561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8ab76de188f0129b813aef55e53b771fb14f44a2a960ab48dabf0ea4c7c6561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8ab76de188f0129b813aef55e53b771fb14f44a2a960ab48dabf0ea4c7c6561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8ab76de188f0129b813aef55e53b771fb14f44a2a960ab48dabf0ea4c7c6561","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8ab76de188f0129b813aef55e53b771fb14f44a2a960ab48dabf0ea4c7c6561"} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8ab76de188f0129b813aef55e53b771fb14f44a2a960ab48dabf0ea4c7c6561","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8ab76de188f0129b813aef55e53b771fb14f44a2a960ab48dabf0ea4c7c6561"} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8ab76de188f0129b813aef55e53b771fb14f44a2a960ab48dabf0ea4c7c6561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8ab76de188f0129b813aef55e53b771fb14f44a2a960ab48dabf0ea4c7c6561"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8ab76de188f0129b813aef55e53b771fb14f44a2a960ab48dabf0ea4c7c6561","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8ab76de188f0129b813aef55e53b771fb14f44a2a960ab48dabf0ea4c7c6561","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8ab76de188f0129b813aef55e53b771fb14f44a2a960ab48dabf0ea4c7c6561"} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae"} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae"} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae"} {"level":"error","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d515bcdd0fd04a00a9fef3ffe1e3f56ae85e75da1f388f6ce934102413e751f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d515bcdd0fd04a00a9fef3ffe1e3f56ae85e75da1f388f6ce934102413e751f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d515bcdd0fd04a00a9fef3ffe1e3f56ae85e75da1f388f6ce934102413e751f5"} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d515bcdd0fd04a00a9fef3ffe1e3f56ae85e75da1f388f6ce934102413e751f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d515bcdd0fd04a00a9fef3ffe1e3f56ae85e75da1f388f6ce934102413e751f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d515bcdd0fd04a00a9fef3ffe1e3f56ae85e75da1f388f6ce934102413e751f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d515bcdd0fd04a00a9fef3ffe1e3f56ae85e75da1f388f6ce934102413e751f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae"} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d515bcdd0fd04a00a9fef3ffe1e3f56ae85e75da1f388f6ce934102413e751f5"} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae"} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496"} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a5e3d09d4551c6f9725165b9d3f7b69f1afdcfec79dab7f91ceb235127460a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a5e3d09d4551c6f9725165b9d3f7b69f1afdcfec79dab7f91ceb235127460a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a5e3d09d4551c6f9725165b9d3f7b69f1afdcfec79dab7f91ceb235127460a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a5e3d09d4551c6f9725165b9d3f7b69f1afdcfec79dab7f91ceb235127460a6"} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a5e3d09d4551c6f9725165b9d3f7b69f1afdcfec79dab7f91ceb235127460a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a5e3d09d4551c6f9725165b9d3f7b69f1afdcfec79dab7f91ceb235127460a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a5e3d09d4551c6f9725165b9d3f7b69f1afdcfec79dab7f91ceb235127460a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a5e3d09d4551c6f9725165b9d3f7b69f1afdcfec79dab7f91ceb235127460a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496"} {"level":"info","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a5e3d09d4551c6f9725165b9d3f7b69f1afdcfec79dab7f91ceb235127460a6"} {"level":"debug","ts":"2026-07-21T04:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"000ab2bb732ae0d772b8c3d4a99c4ff84967d29f26b02e87ffa9540b447e125c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"000ab2bb732ae0d772b8c3d4a99c4ff84967d29f26b02e87ffa9540b447e125c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebee0ac7aeff7c4e22a1da4da06c97eae86582b2ecb650d8de4849da27b96d25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/000ab2bb732ae0d772b8c3d4a99c4ff84967d29f26b02e87ffa9540b447e125c"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebee0ac7aeff7c4e22a1da4da06c97eae86582b2ecb650d8de4849da27b96d25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"000ab2bb732ae0d772b8c3d4a99c4ff84967d29f26b02e87ffa9540b447e125c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["000ab2bb732ae0d772b8c3d4a99c4ff84967d29f26b02e87ffa9540b447e125c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebee0ac7aeff7c4e22a1da4da06c97eae86582b2ecb650d8de4849da27b96d25"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"000ab2bb732ae0d772b8c3d4a99c4ff84967d29f26b02e87ffa9540b447e125c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1412eee5838fec37b47e26db183edffae18fc0870b265875a0c3de78b27f4360","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1412eee5838fec37b47e26db183edffae18fc0870b265875a0c3de78b27f4360","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebee0ac7aeff7c4e22a1da4da06c97eae86582b2ecb650d8de4849da27b96d25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebee0ac7aeff7c4e22a1da4da06c97eae86582b2ecb650d8de4849da27b96d25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/000ab2bb732ae0d772b8c3d4a99c4ff84967d29f26b02e87ffa9540b447e125c"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebee0ac7aeff7c4e22a1da4da06c97eae86582b2ecb650d8de4849da27b96d25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"000ab2bb732ae0d772b8c3d4a99c4ff84967d29f26b02e87ffa9540b447e125c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1412eee5838fec37b47e26db183edffae18fc0870b265875a0c3de78b27f4360","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1412eee5838fec37b47e26db183edffae18fc0870b265875a0c3de78b27f4360"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1412eee5838fec37b47e26db183edffae18fc0870b265875a0c3de78b27f4360","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebee0ac7aeff7c4e22a1da4da06c97eae86582b2ecb650d8de4849da27b96d25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebee0ac7aeff7c4e22a1da4da06c97eae86582b2ecb650d8de4849da27b96d25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1412eee5838fec37b47e26db183edffae18fc0870b265875a0c3de78b27f4360","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1412eee5838fec37b47e26db183edffae18fc0870b265875a0c3de78b27f4360"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebee0ac7aeff7c4e22a1da4da06c97eae86582b2ecb650d8de4849da27b96d25"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1412eee5838fec37b47e26db183edffae18fc0870b265875a0c3de78b27f4360","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/000ab2bb732ae0d772b8c3d4a99c4ff84967d29f26b02e87ffa9540b447e125c"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebee0ac7aeff7c4e22a1da4da06c97eae86582b2ecb650d8de4849da27b96d25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebee0ac7aeff7c4e22a1da4da06c97eae86582b2ecb650d8de4849da27b96d25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebee0ac7aeff7c4e22a1da4da06c97eae86582b2ecb650d8de4849da27b96d25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7a25c8446158190b72cd33e0b66ad203ef689b7742289f4c855592d5b402d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1412eee5838fec37b47e26db183edffae18fc0870b265875a0c3de78b27f4360"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7a25c8446158190b72cd33e0b66ad203ef689b7742289f4c855592d5b402d3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1412eee5838fec37b47e26db183edffae18fc0870b265875a0c3de78b27f4360","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebee0ac7aeff7c4e22a1da4da06c97eae86582b2ecb650d8de4849da27b96d25"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bc6c084d539c8d70f996613aa9dd7e89244e1dfbde69ab9ccd31c5501e78d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bc6c084d539c8d70f996613aa9dd7e89244e1dfbde69ab9ccd31c5501e78d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebee0ac7aeff7c4e22a1da4da06c97eae86582b2ecb650d8de4849da27b96d25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7a25c8446158190b72cd33e0b66ad203ef689b7742289f4c855592d5b402d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7a25c8446158190b72cd33e0b66ad203ef689b7742289f4c855592d5b402d3f"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7a25c8446158190b72cd33e0b66ad203ef689b7742289f4c855592d5b402d3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bc6c084d539c8d70f996613aa9dd7e89244e1dfbde69ab9ccd31c5501e78d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bc6c084d539c8d70f996613aa9dd7e89244e1dfbde69ab9ccd31c5501e78d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab2bd2db4eaaf2bd347e81598be2c5c3ccf1ade739d040aa833cf28f89906dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28bc6c084d539c8d70f996613aa9dd7e89244e1dfbde69ab9ccd31c5501e78d9"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab2bd2db4eaaf2bd347e81598be2c5c3ccf1ade739d040aa833cf28f89906dc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7a25c8446158190b72cd33e0b66ad203ef689b7742289f4c855592d5b402d3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7a25c8446158190b72cd33e0b66ad203ef689b7742289f4c855592d5b402d3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7a25c8446158190b72cd33e0b66ad203ef689b7742289f4c855592d5b402d3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73fae1eff3f78d07935004ddd36296ce12c0bd440f63ac41c11247f14f68be92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab2bd2db4eaaf2bd347e81598be2c5c3ccf1ade739d040aa833cf28f89906dc8"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73fae1eff3f78d07935004ddd36296ce12c0bd440f63ac41c11247f14f68be92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bc6c084d539c8d70f996613aa9dd7e89244e1dfbde69ab9ccd31c5501e78d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28bc6c084d539c8d70f996613aa9dd7e89244e1dfbde69ab9ccd31c5501e78d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bc6c084d539c8d70f996613aa9dd7e89244e1dfbde69ab9ccd31c5501e78d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01cba5058936fc4dff45a229b74cb82ed9397c87e0bb0376bb6aea0995d75924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7a25c8446158190b72cd33e0b66ad203ef689b7742289f4c855592d5b402d3f"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01cba5058936fc4dff45a229b74cb82ed9397c87e0bb0376bb6aea0995d75924","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab2bd2db4eaaf2bd347e81598be2c5c3ccf1ade739d040aa833cf28f89906dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab2bd2db4eaaf2bd347e81598be2c5c3ccf1ade739d040aa833cf28f89906dc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73fae1eff3f78d07935004ddd36296ce12c0bd440f63ac41c11247f14f68be92"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab2bd2db4eaaf2bd347e81598be2c5c3ccf1ade739d040aa833cf28f89906dc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7a25c8446158190b72cd33e0b66ad203ef689b7742289f4c855592d5b402d3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01cba5058936fc4dff45a229b74cb82ed9397c87e0bb0376bb6aea0995d75924"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28bc6c084d539c8d70f996613aa9dd7e89244e1dfbde69ab9ccd31c5501e78d9"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc871c3ff549c0fb1eb0caf64b03d0cc1ad3d05567ebf2c9675d35b32163362"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc871c3ff549c0fb1eb0caf64b03d0cc1ad3d05567ebf2c9675d35b32163362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc871c3ff549c0fb1eb0caf64b03d0cc1ad3d05567ebf2c9675d35b32163362"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f97f16e388d3da48bbe6cecc8b5b0520c818cbd815fb292e408a7e98947e6cb"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e200cdcc6a44216c845c464f3fbbd4d2275bc1913046730361e3da3adcbee5b"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc871c3ff549c0fb1eb0caf64b03d0cc1ad3d05567ebf2c9675d35b32163362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f97f16e388d3da48bbe6cecc8b5b0520c818cbd815fb292e408a7e98947e6cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f97f16e388d3da48bbe6cecc8b5b0520c818cbd815fb292e408a7e98947e6cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab2bd2db4eaaf2bd347e81598be2c5c3ccf1ade739d040aa833cf28f89906dc8"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f97f16e388d3da48bbe6cecc8b5b0520c818cbd815fb292e408a7e98947e6cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73fae1eff3f78d07935004ddd36296ce12c0bd440f63ac41c11247f14f68be92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73fae1eff3f78d07935004ddd36296ce12c0bd440f63ac41c11247f14f68be92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc871c3ff549c0fb1eb0caf64b03d0cc1ad3d05567ebf2c9675d35b32163362"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73fae1eff3f78d07935004ddd36296ce12c0bd440f63ac41c11247f14f68be92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e200cdcc6a44216c845c464f3fbbd4d2275bc1913046730361e3da3adcbee5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e200cdcc6a44216c845c464f3fbbd4d2275bc1913046730361e3da3adcbee5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f97f16e388d3da48bbe6cecc8b5b0520c818cbd815fb292e408a7e98947e6cb"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73fae1eff3f78d07935004ddd36296ce12c0bd440f63ac41c11247f14f68be92"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e200cdcc6a44216c845c464f3fbbd4d2275bc1913046730361e3da3adcbee5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28bc6c084d539c8d70f996613aa9dd7e89244e1dfbde69ab9ccd31c5501e78d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e200cdcc6a44216c845c464f3fbbd4d2275bc1913046730361e3da3adcbee5b"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01cba5058936fc4dff45a229b74cb82ed9397c87e0bb0376bb6aea0995d75924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01cba5058936fc4dff45a229b74cb82ed9397c87e0bb0376bb6aea0995d75924"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01cba5058936fc4dff45a229b74cb82ed9397c87e0bb0376bb6aea0995d75924","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01cba5058936fc4dff45a229b74cb82ed9397c87e0bb0376bb6aea0995d75924"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab2bd2db4eaaf2bd347e81598be2c5c3ccf1ade739d040aa833cf28f89906dc8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc871c3ff549c0fb1eb0caf64b03d0cc1ad3d05567ebf2c9675d35b32163362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f97f16e388d3da48bbe6cecc8b5b0520c818cbd815fb292e408a7e98947e6cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73fae1eff3f78d07935004ddd36296ce12c0bd440f63ac41c11247f14f68be92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e200cdcc6a44216c845c464f3fbbd4d2275bc1913046730361e3da3adcbee5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01cba5058936fc4dff45a229b74cb82ed9397c87e0bb0376bb6aea0995d75924","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e"} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e"} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e"} {"level":"debug","ts":"2026-07-21T04:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T04:53:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T04:53:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e"} {"level":"info","ts":"2026-07-21T04:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e"} {"level":"info","ts":"2026-07-21T04:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T04:53:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T04:53:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T04:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e"} {"level":"error","ts":"2026-07-21T04:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T04:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T04:53:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"463fd5ae-013d-4e23-a15e-dbe9554bbb0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58642","PortSpecifier":{"PortValue":58642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"463fd5ae-013d-4e23-a15e-dbe9554bbb0d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"463fd5ae-013d-4e23-a15e-dbe9554bbb0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58642","PortSpecifier":{"PortValue":58642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609591,"nanos":443264517},"http":{"id":"463fd5ae-013d-4e23-a15e-dbe9554bbb0d","method":"POST","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"463fd5ae-013d-4e23-a15e-dbe9554bbb0d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"463fd5ae-013d-4e23-a15e-dbe9554bbb0d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"463fd5ae-013d-4e23-a15e-dbe9554bbb0d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"463fd5ae-013d-4e23-a15e-dbe9554bbb0d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"463fd5ae-013d-4e23-a15e-dbe9554bbb0d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"463fd5ae-013d-4e23-a15e-dbe9554bbb0d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"463fd5ae-013d-4e23-a15e-dbe9554bbb0d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"463fd5ae-013d-4e23-a15e-dbe9554bbb0d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"463fd5ae-013d-4e23-a15e-dbe9554bbb0d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"463fd5ae-013d-4e23-a15e-dbe9554bbb0d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"463fd5ae-013d-4e23-a15e-dbe9554bbb0d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c099b8b6-a8e2-49e9-8214-fd59fd9a9d0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53638","PortSpecifier":{"PortValue":53638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c099b8b6-a8e2-49e9-8214-fd59fd9a9d0c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c099b8b6-a8e2-49e9-8214-fd59fd9a9d0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53638","PortSpecifier":{"PortValue":53638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609591,"nanos":487632310},"http":{"id":"c099b8b6-a8e2-49e9-8214-fd59fd9a9d0c","method":"POST","headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c099b8b6-a8e2-49e9-8214-fd59fd9a9d0c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c099b8b6-a8e2-49e9-8214-fd59fd9a9d0c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c099b8b6-a8e2-49e9-8214-fd59fd9a9d0c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c099b8b6-a8e2-49e9-8214-fd59fd9a9d0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c099b8b6-a8e2-49e9-8214-fd59fd9a9d0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c099b8b6-a8e2-49e9-8214-fd59fd9a9d0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfd2ba/rate-test-model-cfd2ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfd2ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c099b8b6-a8e2-49e9-8214-fd59fd9a9d0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c099b8b6-a8e2-49e9-8214-fd59fd9a9d0c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c099b8b6-a8e2-49e9-8214-fd59fd9a9d0c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c099b8b6-a8e2-49e9-8214-fd59fd9a9d0c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c099b8b6-a8e2-49e9-8214-fd59fd9a9d0c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58652","PortSpecifier":{"PortValue":58652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","method":"POST","path":"/ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee/v1/completions","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58652","PortSpecifier":{"PortValue":58652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609591,"nanos":527791109},"http":{"id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","method":"POST","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1buxOwXn94yw4BNPy_jEbEu57Q32wNyFJ9aZ1DcvqDmq4pXw4uzcvo5dpfl0G"} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1buxOwXn94yw4BNPy_jEbEu57Q32wNyFJ9aZ1DcvqDmq4pXw4uzcvo5dpfl0G\"}"} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"550638a1-4b64-438e-b70d-826d7eedd3d2","keyName":"e2e-rate-a-6fcba2","subscription":"e2e-rate-iso-a-6fcba2","tenant":"e2e-shared-a-e19fee","userId":"550638a1-4b64-438e-b70d-826d7eedd3d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee\",\"requestedSubscription\":\"e2e-rate-iso-a-6fcba2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e19fee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcba2","namespace":"ai-tenant-e2e-shared-a-e19fee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee"}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fcba2"} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"550638a1-4b64-438e-b70d-826d7eedd3d2","keyName":"e2e-rate-a-6fcba2","selected_subscription":"e2e-rate-iso-a-6fcba2","selected_subscription_key":"ai-tenant-e2e-shared-a-e19fee/e2e-rate-iso-a-6fcba2@ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e19fee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcba2","namespace":"ai-tenant-e2e-shared-a-e19fee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:53:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cfc581a-4c5a-4010-8282-ea0d1c016418","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58660","PortSpecifier":{"PortValue":58660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ff91413-ae64-4a58-8881-6705df167ef0","method":"POST","path":"/ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee/v1/completions","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58660","PortSpecifier":{"PortValue":58660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609592,"nanos":587387677},"http":{"id":"1ff91413-ae64-4a58-8881-6705df167ef0","method":"POST","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1buxOwXn94yw4BNPy_jEbEu57Q32wNyFJ9aZ1DcvqDmq4pXw4uzcvo5dpfl0G"} {"level":"debug","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1buxOwXn94yw4BNPy_jEbEu57Q32wNyFJ9aZ1DcvqDmq4pXw4uzcvo5dpfl0G\"}"} {"level":"debug","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"550638a1-4b64-438e-b70d-826d7eedd3d2","keyName":"e2e-rate-a-6fcba2","subscription":"e2e-rate-iso-a-6fcba2","tenant":"e2e-shared-a-e19fee","userId":"550638a1-4b64-438e-b70d-826d7eedd3d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee\",\"requestedSubscription\":\"e2e-rate-iso-a-6fcba2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e19fee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcba2","namespace":"ai-tenant-e2e-shared-a-e19fee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee"}} {"level":"debug","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fcba2"} {"level":"debug","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"550638a1-4b64-438e-b70d-826d7eedd3d2","keyName":"e2e-rate-a-6fcba2","selected_subscription":"e2e-rate-iso-a-6fcba2","selected_subscription_key":"ai-tenant-e2e-shared-a-e19fee/e2e-rate-iso-a-6fcba2@ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e19fee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcba2","namespace":"ai-tenant-e2e-shared-a-e19fee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:53:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ff91413-ae64-4a58-8881-6705df167ef0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dee6997f-9b1f-4625-9aae-41794362217c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58674","PortSpecifier":{"PortValue":58674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dee6997f-9b1f-4625-9aae-41794362217c","method":"POST","path":"/ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee/v1/completions","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dee6997f-9b1f-4625-9aae-41794362217c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58674","PortSpecifier":{"PortValue":58674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609593,"nanos":628738692},"http":{"id":"dee6997f-9b1f-4625-9aae-41794362217c","method":"POST","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dee6997f-9b1f-4625-9aae-41794362217c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1buxOwXn94yw4BNPy_jEbEu57Q32wNyFJ9aZ1DcvqDmq4pXw4uzcvo5dpfl0G"} {"level":"debug","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dee6997f-9b1f-4625-9aae-41794362217c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1buxOwXn94yw4BNPy_jEbEu57Q32wNyFJ9aZ1DcvqDmq4pXw4uzcvo5dpfl0G\"}"} {"level":"debug","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dee6997f-9b1f-4625-9aae-41794362217c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"550638a1-4b64-438e-b70d-826d7eedd3d2","keyName":"e2e-rate-a-6fcba2","subscription":"e2e-rate-iso-a-6fcba2","tenant":"e2e-shared-a-e19fee","userId":"550638a1-4b64-438e-b70d-826d7eedd3d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dee6997f-9b1f-4625-9aae-41794362217c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee\",\"requestedSubscription\":\"e2e-rate-iso-a-6fcba2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dee6997f-9b1f-4625-9aae-41794362217c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e19fee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcba2","namespace":"ai-tenant-e2e-shared-a-e19fee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee"}} {"level":"debug","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dee6997f-9b1f-4625-9aae-41794362217c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee6997f-9b1f-4625-9aae-41794362217c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee6997f-9b1f-4625-9aae-41794362217c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee6997f-9b1f-4625-9aae-41794362217c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee6997f-9b1f-4625-9aae-41794362217c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee6997f-9b1f-4625-9aae-41794362217c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee6997f-9b1f-4625-9aae-41794362217c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee6997f-9b1f-4625-9aae-41794362217c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fcba2"} {"level":"debug","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee6997f-9b1f-4625-9aae-41794362217c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"550638a1-4b64-438e-b70d-826d7eedd3d2","keyName":"e2e-rate-a-6fcba2","selected_subscription":"e2e-rate-iso-a-6fcba2","selected_subscription_key":"ai-tenant-e2e-shared-a-e19fee/e2e-rate-iso-a-6fcba2@ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e19fee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcba2","namespace":"ai-tenant-e2e-shared-a-e19fee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dee6997f-9b1f-4625-9aae-41794362217c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:53:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dee6997f-9b1f-4625-9aae-41794362217c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"641468b9-db68-4994-8d7d-c453737ec52e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46624","PortSpecifier":{"PortValue":46624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"641468b9-db68-4994-8d7d-c453737ec52e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"641468b9-db68-4994-8d7d-c453737ec52e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46624","PortSpecifier":{"PortValue":46624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609604,"nanos":520966962},"http":{"id":"641468b9-db68-4994-8d7d-c453737ec52e","method":"POST","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"641468b9-db68-4994-8d7d-c453737ec52e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"641468b9-db68-4994-8d7d-c453737ec52e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"641468b9-db68-4994-8d7d-c453737ec52e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"641468b9-db68-4994-8d7d-c453737ec52e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"641468b9-db68-4994-8d7d-c453737ec52e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"641468b9-db68-4994-8d7d-c453737ec52e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"641468b9-db68-4994-8d7d-c453737ec52e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"641468b9-db68-4994-8d7d-c453737ec52e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"641468b9-db68-4994-8d7d-c453737ec52e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"641468b9-db68-4994-8d7d-c453737ec52e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"641468b9-db68-4994-8d7d-c453737ec52e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"326b3c9d-243b-4870-b202-217a8f0e26a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34894","PortSpecifier":{"PortValue":34894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"326b3c9d-243b-4870-b202-217a8f0e26a5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"326b3c9d-243b-4870-b202-217a8f0e26a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34894","PortSpecifier":{"PortValue":34894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609604,"nanos":577992439},"http":{"id":"326b3c9d-243b-4870-b202-217a8f0e26a5","method":"POST","headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"326b3c9d-243b-4870-b202-217a8f0e26a5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"326b3c9d-243b-4870-b202-217a8f0e26a5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbef8458-31e8-4a1b-8535-a66394372b56","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"]}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"326b3c9d-243b-4870-b202-217a8f0e26a5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a5af01377843"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9d8aea29-57dc-48db-b511-33c9d6784575"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbef8458-31e8-4a1b-8535-a66394372b56","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"326b3c9d-243b-4870-b202-217a8f0e26a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"326b3c9d-243b-4870-b202-217a8f0e26a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"326b3c9d-243b-4870-b202-217a8f0e26a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfd2ba/rate-test-model-cfd2ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfd2ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"326b3c9d-243b-4870-b202-217a8f0e26a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"326b3c9d-243b-4870-b202-217a8f0e26a5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"326b3c9d-243b-4870-b202-217a8f0e26a5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"326b3c9d-243b-4870-b202-217a8f0e26a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"326b3c9d-243b-4870-b202-217a8f0e26a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f860362-c326-9883-9b03-54d20c5ec337","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46630","PortSpecifier":{"PortValue":46630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f860362-c326-9883-9b03-54d20c5ec337","method":"POST","path":"/ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee/v1/completions","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f860362-c326-9883-9b03-54d20c5ec337","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46630","PortSpecifier":{"PortValue":46630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609604,"nanos":613507742},"http":{"id":"9f860362-c326-9883-9b03-54d20c5ec337","method":"POST","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f860362-c326-9883-9b03-54d20c5ec337","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MzHbY5u7bYg7T8cN_n57oBga1UBoeKiZL3vUx8McQIyIySy4XITTAoaxi09x"} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f860362-c326-9883-9b03-54d20c5ec337","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MzHbY5u7bYg7T8cN_n57oBga1UBoeKiZL3vUx8McQIyIySy4XITTAoaxi09x\"}"} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f860362-c326-9883-9b03-54d20c5ec337","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"115f9b35-bc56-4a07-8b29-18e9774071ed","keyName":"e2e-rate-a-19ec0f","subscription":"e2e-rate-iso-a-19ec0f","tenant":"e2e-shared-a-e19fee","userId":"115f9b35-bc56-4a07-8b29-18e9774071ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f860362-c326-9883-9b03-54d20c5ec337","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee\",\"requestedSubscription\":\"e2e-rate-iso-a-19ec0f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f860362-c326-9883-9b03-54d20c5ec337","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e19fee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19ec0f","namespace":"ai-tenant-e2e-shared-a-e19fee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee"}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f860362-c326-9883-9b03-54d20c5ec337","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f860362-c326-9883-9b03-54d20c5ec337","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f860362-c326-9883-9b03-54d20c5ec337","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f860362-c326-9883-9b03-54d20c5ec337","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f860362-c326-9883-9b03-54d20c5ec337","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f860362-c326-9883-9b03-54d20c5ec337","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-19ec0f"} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f860362-c326-9883-9b03-54d20c5ec337","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f860362-c326-9883-9b03-54d20c5ec337","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f860362-c326-9883-9b03-54d20c5ec337","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"115f9b35-bc56-4a07-8b29-18e9774071ed","keyName":"e2e-rate-a-19ec0f","selected_subscription":"e2e-rate-iso-a-19ec0f","selected_subscription_key":"ai-tenant-e2e-shared-a-e19fee/e2e-rate-iso-a-19ec0f@ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e19fee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19ec0f","namespace":"ai-tenant-e2e-shared-a-e19fee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f860362-c326-9883-9b03-54d20c5ec337","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:53:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f860362-c326-9883-9b03-54d20c5ec337","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46646","PortSpecifier":{"PortValue":46646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","method":"POST","path":"/ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee/v1/completions","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46646","PortSpecifier":{"PortValue":46646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609605,"nanos":655604215},"http":{"id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","method":"POST","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MzHbY5u7bYg7T8cN_n57oBga1UBoeKiZL3vUx8McQIyIySy4XITTAoaxi09x"} {"level":"debug","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MzHbY5u7bYg7T8cN_n57oBga1UBoeKiZL3vUx8McQIyIySy4XITTAoaxi09x\"}"} {"level":"debug","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"115f9b35-bc56-4a07-8b29-18e9774071ed","keyName":"e2e-rate-a-19ec0f","subscription":"e2e-rate-iso-a-19ec0f","tenant":"e2e-shared-a-e19fee","userId":"115f9b35-bc56-4a07-8b29-18e9774071ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee\",\"requestedSubscription\":\"e2e-rate-iso-a-19ec0f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e19fee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19ec0f","namespace":"ai-tenant-e2e-shared-a-e19fee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee"}} {"level":"debug","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-19ec0f"} {"level":"debug","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"115f9b35-bc56-4a07-8b29-18e9774071ed","keyName":"e2e-rate-a-19ec0f","selected_subscription":"e2e-rate-iso-a-19ec0f","selected_subscription_key":"ai-tenant-e2e-shared-a-e19fee/e2e-rate-iso-a-19ec0f@ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e19fee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19ec0f","namespace":"ai-tenant-e2e-shared-a-e19fee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:53:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dc9bc24-8338-4190-9f6d-6ccc3c769319","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46648","PortSpecifier":{"PortValue":46648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20fd81fa-9110-44f3-8661-3a8b74477354","method":"POST","path":"/ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee/v1/completions","host":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46648","PortSpecifier":{"PortValue":46648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609606,"nanos":690691760},"http":{"id":"20fd81fa-9110-44f3-8661-3a8b74477354","method":"POST","headers":{":authority":"e2e-shared-a-e19fee.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MzHbY5u7bYg7T8cN_n57oBga1UBoeKiZL3vUx8McQIyIySy4XITTAoaxi09x"} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MzHbY5u7bYg7T8cN_n57oBga1UBoeKiZL3vUx8McQIyIySy4XITTAoaxi09x\"}"} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"115f9b35-bc56-4a07-8b29-18e9774071ed","keyName":"e2e-rate-a-19ec0f","subscription":"e2e-rate-iso-a-19ec0f","tenant":"e2e-shared-a-e19fee","userId":"115f9b35-bc56-4a07-8b29-18e9774071ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee\",\"requestedSubscription\":\"e2e-rate-iso-a-19ec0f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e19fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e19fee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19ec0f","namespace":"ai-tenant-e2e-shared-a-e19fee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee"}} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e19fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-19ec0f"} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"115f9b35-bc56-4a07-8b29-18e9774071ed","keyName":"e2e-rate-a-19ec0f","selected_subscription":"e2e-rate-iso-a-19ec0f","selected_subscription_key":"ai-tenant-e2e-shared-a-e19fee/e2e-rate-iso-a-19ec0f@ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e19fee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19ec0f","namespace":"ai-tenant-e2e-shared-a-e19fee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e19fee/rate-test-model-e19fee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20fd81fa-9110-44f3-8661-3a8b74477354","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34900","PortSpecifier":{"PortValue":34900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff423942-2b72-40cf-bfcd-33621dfaa472","method":"POST","path":"/ai-tenant-e2e-shared-b-cfd2ba/rate-test-model-cfd2ba/v1/completions","host":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34900","PortSpecifier":{"PortValue":34900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784609606,"nanos":728933332},"http":{"id":"ff423942-2b72-40cf-bfcd-33621dfaa472","method":"POST","headers":{":authority":"e2e-shared-b-cfd2ba.apps.42443ed4-1177-46b0-8454-a5af01377843.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-cfd2ba/rate-test-model-cfd2ba/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pDZdTmDZUgylN6yq_Bi5WENevUPt989Rm1SW9qvgdNJsBQzAE4ldgR2kPztP"} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-cfd2ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pDZdTmDZUgylN6yq_Bi5WENevUPt989Rm1SW9qvgdNJsBQzAE4ldgR2kPztP\"}"} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cfd2ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ee7d80e5-fc82-4b57-9c27-e0c591d13735","keyName":"e2e-rate-b-19ec0f","subscription":"e2e-rate-iso-b-19ec0f","tenant":"e2e-shared-b-cfd2ba","userId":"ee7d80e5-fc82-4b57-9c27-e0c591d13735","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-cfd2ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-cfd2ba/rate-test-model-cfd2ba\",\"requestedSubscription\":\"e2e-rate-iso-b-19ec0f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cfd2ba.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cfd2ba","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-19ec0f","namespace":"ai-tenant-e2e-shared-b-cfd2ba","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-cfd2ba/rate-test-model-cfd2ba"}} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfd2ba/rate-test-model-cfd2ba\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfd2ba/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-19ec0f"} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ee7d80e5-fc82-4b57-9c27-e0c591d13735","keyName":"e2e-rate-b-19ec0f","selected_subscription":"e2e-rate-iso-b-19ec0f","selected_subscription_key":"ai-tenant-e2e-shared-b-cfd2ba/e2e-rate-iso-b-19ec0f@ai-tenant-e2e-shared-b-cfd2ba/rate-test-model-cfd2ba","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cfd2ba","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-19ec0f","namespace":"ai-tenant-e2e-shared-b-cfd2ba","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-cfd2ba/rate-test-model-cfd2ba"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T04:53:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff423942-2b72-40cf-bfcd-33621dfaa472","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T04:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73fae1eff3f78d07935004ddd36296ce12c0bd440f63ac41c11247f14f68be92"} {"level":"info","ts":"2026-07-21T04:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b20e26b1383e4bc6267a401108ba2e83683b9011cb6b7217678dbba08798b41f"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28bc6c084d539c8d70f996613aa9dd7e89244e1dfbde69ab9ccd31c5501e78d9"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a5e3d09d4551c6f9725165b9d3f7b69f1afdcfec79dab7f91ceb235127460a6"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1412eee5838fec37b47e26db183edffae18fc0870b265875a0c3de78b27f4360"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57e2e8c9802e658dd817a84e5f0c245eafb65aa7ab3e8e8f0674ef0c040bd202"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55ed3d2d36148c283a2c6a7b336beff3dcd0d1006bdb1ff3c1140d2476ab3f3c"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/000ab2bb732ae0d772b8c3d4a99c4ff84967d29f26b02e87ffa9540b447e125c"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb1eaa69396b09d640a638976e39d2f56c3fefe0f6399a76781c4f61fe0ef496"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2a067a1c4a9feaf2a1a4922e2dd44d298ab4949873e4a301f3f641958c5be05"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d04337888150a3f4a7d527b3fa1814df3dea1705988f5f68c0ee8e9a4bbb978"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7a25c8446158190b72cd33e0b66ad203ef689b7742289f4c855592d5b402d3f"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e200cdcc6a44216c845c464f3fbbd4d2275bc1913046730361e3da3adcbee5b"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab2bd2db4eaaf2bd347e81598be2c5c3ccf1ade739d040aa833cf28f89906dc8"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01cba5058936fc4dff45a229b74cb82ed9397c87e0bb0376bb6aea0995d75924"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/263cd00bb27680269f1e2a4813092e0746f586f06e14b835109d7f61c4fb6e3e"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2dc871c3ff549c0fb1eb0caf64b03d0cc1ad3d05567ebf2c9675d35b32163362"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3a0392a414fc08e9f829a093dbab42cd961b3bb08226fd418623e1c8dad5c6c"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8ab76de188f0129b813aef55e53b771fb14f44a2a960ab48dabf0ea4c7c6561"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d515bcdd0fd04a00a9fef3ffe1e3f56ae85e75da1f388f6ce934102413e751f5"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebee0ac7aeff7c4e22a1da4da06c97eae86582b2ecb650d8de4849da27b96d25"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12a904c02622dacca246fd2f5a1ba964b43ff1f2f6ce5384dc077cae737ddcae"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f97f16e388d3da48bbe6cecc8b5b0520c818cbd815fb292e408a7e98947e6cb"} {"level":"info","ts":"2026-07-21T04:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/185d43e3e98c8be061b880136767099f12bfbd399b3afa49ebc932c622c51a7e"}