--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2664894-db73-470a-bde0-2d43e5c12329","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38e69f13-34ac-4763-803d-a85ab429aa41","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2664894-db73-470a-bde0-2d43e5c12329","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2664894-db73-470a-bde0-2d43e5c12329","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2664894-db73-470a-bde0-2d43e5c12329","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f0ad55/auth-test-model-f0ad55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2664894-db73-470a-bde0-2d43e5c12329","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2664894-db73-470a-bde0-2d43e5c12329","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2664894-db73-470a-bde0-2d43e5c12329","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2664894-db73-470a-bde0-2d43e5c12329","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2664894-db73-470a-bde0-2d43e5c12329","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2807bfd0-c16e-4626-a2c3-e49e2c59af8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59778","PortSpecifier":{"PortValue":59778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2807bfd0-c16e-4626-a2c3-e49e2c59af8e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2807bfd0-c16e-4626-a2c3-e49e2c59af8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59778","PortSpecifier":{"PortValue":59778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331203,"nanos":67273796},"http":{"id":"2807bfd0-c16e-4626-a2c3-e49e2c59af8e","method":"POST","headers":{":authority":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2807bfd0-c16e-4626-a2c3-e49e2c59af8e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2807bfd0-c16e-4626-a2c3-e49e2c59af8e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38e69f13-34ac-4763-803d-a85ab429aa41","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"]}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2807bfd0-c16e-4626-a2c3-e49e2c59af8e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38e69f13-34ac-4763-803d-a85ab429aa41","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2807bfd0-c16e-4626-a2c3-e49e2c59af8e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2807bfd0-c16e-4626-a2c3-e49e2c59af8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2807bfd0-c16e-4626-a2c3-e49e2c59af8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11a904/auth-test-model-11a904\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-11a904/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2807bfd0-c16e-4626-a2c3-e49e2c59af8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2807bfd0-c16e-4626-a2c3-e49e2c59af8e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2807bfd0-c16e-4626-a2c3-e49e2c59af8e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2807bfd0-c16e-4626-a2c3-e49e2c59af8e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2807bfd0-c16e-4626-a2c3-e49e2c59af8e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"618371a2-ccaa-481a-bd64-e164e47cbbb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59790","PortSpecifier":{"PortValue":59790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"618371a2-ccaa-481a-bd64-e164e47cbbb5","method":"GET","path":"/maas-api/v1/api-keys/48588c63-a022-4c70-9857-b0d5655cf202","host":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"618371a2-ccaa-481a-bd64-e164e47cbbb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59790","PortSpecifier":{"PortValue":59790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331203,"nanos":107456348},"http":{"id":"618371a2-ccaa-481a-bd64-e164e47cbbb5","method":"GET","headers":{":authority":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/48588c63-a022-4c70-9857-b0d5655cf202",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"618371a2-ccaa-481a-bd64-e164e47cbbb5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"618371a2-ccaa-481a-bd64-e164e47cbbb5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38e69f13-34ac-4763-803d-a85ab429aa41","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"]}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"618371a2-ccaa-481a-bd64-e164e47cbbb5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38e69f13-34ac-4763-803d-a85ab429aa41","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/48588c63-a022-4c70-9857-b0d5655cf202",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"618371a2-ccaa-481a-bd64-e164e47cbbb5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"618371a2-ccaa-481a-bd64-e164e47cbbb5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"618371a2-ccaa-481a-bd64-e164e47cbbb5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11a904/auth-test-model-11a904\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-11a904/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"618371a2-ccaa-481a-bd64-e164e47cbbb5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"618371a2-ccaa-481a-bd64-e164e47cbbb5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"618371a2-ccaa-481a-bd64-e164e47cbbb5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"618371a2-ccaa-481a-bd64-e164e47cbbb5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"618371a2-ccaa-481a-bd64-e164e47cbbb5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c1b998e-7850-4ed5-9245-975b823ba819","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33216","PortSpecifier":{"PortValue":33216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c1b998e-7850-4ed5-9245-975b823ba819","method":"GET","path":"/maas-api/v1/api-keys/48588c63-a022-4c70-9857-b0d5655cf202","host":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c1b998e-7850-4ed5-9245-975b823ba819","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33216","PortSpecifier":{"PortValue":33216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331203,"nanos":148780835},"http":{"id":"9c1b998e-7850-4ed5-9245-975b823ba819","method":"GET","headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/48588c63-a022-4c70-9857-b0d5655cf202",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c1b998e-7850-4ed5-9245-975b823ba819","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c1b998e-7850-4ed5-9245-975b823ba819","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38e69f13-34ac-4763-803d-a85ab429aa41","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"]}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c1b998e-7850-4ed5-9245-975b823ba819","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38e69f13-34ac-4763-803d-a85ab429aa41","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/48588c63-a022-4c70-9857-b0d5655cf202",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c1b998e-7850-4ed5-9245-975b823ba819","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c1b998e-7850-4ed5-9245-975b823ba819","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c1b998e-7850-4ed5-9245-975b823ba819","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f0ad55/auth-test-model-f0ad55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c1b998e-7850-4ed5-9245-975b823ba819","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c1b998e-7850-4ed5-9245-975b823ba819","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c1b998e-7850-4ed5-9245-975b823ba819","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c1b998e-7850-4ed5-9245-975b823ba819","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:20:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c1b998e-7850-4ed5-9245-975b823ba819","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/210b73e2b42819ff9371fc214ec8714755eb15b81fb392bfc53099974bf28a67"} {"level":"info","ts":"2026-07-29T13:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641"} {"level":"info","ts":"2026-07-29T13:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/219aa4764b0d834f5c44438154527f9c4f7d1abf6c8bfc3dfc6141021abcc05a"} {"level":"info","ts":"2026-07-29T13:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/466ba6c206057d067f362c0bf9eb563a740735df390b6bc56567f14e2cb4acb0"} {"level":"info","ts":"2026-07-29T13:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9dbaad72e022854cc7525a5bb5bf5d2d435d85d91890b7af6ee3a371573a31b"} {"level":"info","ts":"2026-07-29T13:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2"} {"level":"info","ts":"2026-07-29T13:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"info","ts":"2026-07-29T13:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e9108571f2c95e7f9fc6a706fe51edae5daac8ab60e796d67108c88237dee7b"} {"level":"info","ts":"2026-07-29T13:20:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86b321a1d6f31cd661e9862f3713fcd98d3ce9382fe32d1d5f01b7aa4825ae92"} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466ba6c206057d067f362c0bf9eb563a740735df390b6bc56567f14e2cb4acb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466ba6c206057d067f362c0bf9eb563a740735df390b6bc56567f14e2cb4acb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466ba6c206057d067f362c0bf9eb563a740735df390b6bc56567f14e2cb4acb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466ba6c206057d067f362c0bf9eb563a740735df390b6bc56567f14e2cb4acb0"} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466ba6c206057d067f362c0bf9eb563a740735df390b6bc56567f14e2cb4acb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"466ba6c206057d067f362c0bf9eb563a740735df390b6bc56567f14e2cb4acb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466ba6c206057d067f362c0bf9eb563a740735df390b6bc56567f14e2cb4acb0"} {"level":"error","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466ba6c206057d067f362c0bf9eb563a740735df390b6bc56567f14e2cb4acb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["466ba6c206057d067f362c0bf9eb563a740735df390b6bc56567f14e2cb4acb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466ba6c206057d067f362c0bf9eb563a740735df390b6bc56567f14e2cb4acb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"466ba6c206057d067f362c0bf9eb563a740735df390b6bc56567f14e2cb4acb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466ba6c206057d067f362c0bf9eb563a740735df390b6bc56567f14e2cb4acb0"} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2"} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641"} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2"} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641"} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2"} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641"} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641"} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2"} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:20:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641"} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"210b73e2b42819ff9371fc214ec8714755eb15b81fb392bfc53099974bf28a67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"210b73e2b42819ff9371fc214ec8714755eb15b81fb392bfc53099974bf28a67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b321a1d6f31cd661e9862f3713fcd98d3ce9382fe32d1d5f01b7aa4825ae92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/210b73e2b42819ff9371fc214ec8714755eb15b81fb392bfc53099974bf28a67"} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b321a1d6f31cd661e9862f3713fcd98d3ce9382fe32d1d5f01b7aa4825ae92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"210b73e2b42819ff9371fc214ec8714755eb15b81fb392bfc53099974bf28a67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["210b73e2b42819ff9371fc214ec8714755eb15b81fb392bfc53099974bf28a67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b321a1d6f31cd661e9862f3713fcd98d3ce9382fe32d1d5f01b7aa4825ae92"} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"210b73e2b42819ff9371fc214ec8714755eb15b81fb392bfc53099974bf28a67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9dbaad72e022854cc7525a5bb5bf5d2d435d85d91890b7af6ee3a371573a31b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9dbaad72e022854cc7525a5bb5bf5d2d435d85d91890b7af6ee3a371573a31b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b321a1d6f31cd661e9862f3713fcd98d3ce9382fe32d1d5f01b7aa4825ae92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86b321a1d6f31cd661e9862f3713fcd98d3ce9382fe32d1d5f01b7aa4825ae92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b321a1d6f31cd661e9862f3713fcd98d3ce9382fe32d1d5f01b7aa4825ae92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"210b73e2b42819ff9371fc214ec8714755eb15b81fb392bfc53099974bf28a67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9dbaad72e022854cc7525a5bb5bf5d2d435d85d91890b7af6ee3a371573a31b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9dbaad72e022854cc7525a5bb5bf5d2d435d85d91890b7af6ee3a371573a31b"} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9dbaad72e022854cc7525a5bb5bf5d2d435d85d91890b7af6ee3a371573a31b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e9108571f2c95e7f9fc6a706fe51edae5daac8ab60e796d67108c88237dee7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b321a1d6f31cd661e9862f3713fcd98d3ce9382fe32d1d5f01b7aa4825ae92"} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e9108571f2c95e7f9fc6a706fe51edae5daac8ab60e796d67108c88237dee7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86b321a1d6f31cd661e9862f3713fcd98d3ce9382fe32d1d5f01b7aa4825ae92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219aa4764b0d834f5c44438154527f9c4f7d1abf6c8bfc3dfc6141021abcc05a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219aa4764b0d834f5c44438154527f9c4f7d1abf6c8bfc3dfc6141021abcc05a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9dbaad72e022854cc7525a5bb5bf5d2d435d85d91890b7af6ee3a371573a31b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9dbaad72e022854cc7525a5bb5bf5d2d435d85d91890b7af6ee3a371573a31b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/210b73e2b42819ff9371fc214ec8714755eb15b81fb392bfc53099974bf28a67"} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9dbaad72e022854cc7525a5bb5bf5d2d435d85d91890b7af6ee3a371573a31b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e9108571f2c95e7f9fc6a706fe51edae5daac8ab60e796d67108c88237dee7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e9108571f2c95e7f9fc6a706fe51edae5daac8ab60e796d67108c88237dee7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219aa4764b0d834f5c44438154527f9c4f7d1abf6c8bfc3dfc6141021abcc05a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9dbaad72e022854cc7525a5bb5bf5d2d435d85d91890b7af6ee3a371573a31b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e9108571f2c95e7f9fc6a706fe51edae5daac8ab60e796d67108c88237dee7b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e9108571f2c95e7f9fc6a706fe51edae5daac8ab60e796d67108c88237dee7b"} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e9108571f2c95e7f9fc6a706fe51edae5daac8ab60e796d67108c88237dee7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e9108571f2c95e7f9fc6a706fe51edae5daac8ab60e796d67108c88237dee7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e9108571f2c95e7f9fc6a706fe51edae5daac8ab60e796d67108c88237dee7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219aa4764b0d834f5c44438154527f9c4f7d1abf6c8bfc3dfc6141021abcc05a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219aa4764b0d834f5c44438154527f9c4f7d1abf6c8bfc3dfc6141021abcc05a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e9108571f2c95e7f9fc6a706fe51edae5daac8ab60e796d67108c88237dee7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219aa4764b0d834f5c44438154527f9c4f7d1abf6c8bfc3dfc6141021abcc05a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219aa4764b0d834f5c44438154527f9c4f7d1abf6c8bfc3dfc6141021abcc05a"} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219aa4764b0d834f5c44438154527f9c4f7d1abf6c8bfc3dfc6141021abcc05a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:20:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["219aa4764b0d834f5c44438154527f9c4f7d1abf6c8bfc3dfc6141021abcc05a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219aa4764b0d834f5c44438154527f9c4f7d1abf6c8bfc3dfc6141021abcc05a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219aa4764b0d834f5c44438154527f9c4f7d1abf6c8bfc3dfc6141021abcc05a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9dbaad72e022854cc7525a5bb5bf5d2d435d85d91890b7af6ee3a371573a31b"} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e9108571f2c95e7f9fc6a706fe51edae5daac8ab60e796d67108c88237dee7b"} {"level":"info","ts":"2026-07-29T13:20:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219aa4764b0d834f5c44438154527f9c4f7d1abf6c8bfc3dfc6141021abcc05a"} {"level":"info","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"076189e7-d1d2-43cb-8410-f0a7feabd45e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46832","PortSpecifier":{"PortValue":46832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"076189e7-d1d2-43cb-8410-f0a7feabd45e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"076189e7-d1d2-43cb-8410-f0a7feabd45e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46832","PortSpecifier":{"PortValue":46832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331245,"nanos":56596166},"http":{"id":"076189e7-d1d2-43cb-8410-f0a7feabd45e","method":"POST","headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"076189e7-d1d2-43cb-8410-f0a7feabd45e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"076189e7-d1d2-43cb-8410-f0a7feabd45e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38e69f13-34ac-4763-803d-a85ab429aa41","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"]}} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"076189e7-d1d2-43cb-8410-f0a7feabd45e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38e69f13-34ac-4763-803d-a85ab429aa41","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"076189e7-d1d2-43cb-8410-f0a7feabd45e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"076189e7-d1d2-43cb-8410-f0a7feabd45e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"076189e7-d1d2-43cb-8410-f0a7feabd45e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f0ad55/auth-test-model-f0ad55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"076189e7-d1d2-43cb-8410-f0a7feabd45e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"076189e7-d1d2-43cb-8410-f0a7feabd45e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"076189e7-d1d2-43cb-8410-f0a7feabd45e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"076189e7-d1d2-43cb-8410-f0a7feabd45e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"076189e7-d1d2-43cb-8410-f0a7feabd45e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e604a04-c871-4739-9bda-7d6b87979719","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57544","PortSpecifier":{"PortValue":57544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e604a04-c871-4739-9bda-7d6b87979719","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e604a04-c871-4739-9bda-7d6b87979719","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57544","PortSpecifier":{"PortValue":57544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331245,"nanos":102237762},"http":{"id":"4e604a04-c871-4739-9bda-7d6b87979719","method":"POST","headers":{":authority":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e604a04-c871-4739-9bda-7d6b87979719","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e604a04-c871-4739-9bda-7d6b87979719","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38e69f13-34ac-4763-803d-a85ab429aa41","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"]}} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e604a04-c871-4739-9bda-7d6b87979719","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38e69f13-34ac-4763-803d-a85ab429aa41","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e604a04-c871-4739-9bda-7d6b87979719","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e604a04-c871-4739-9bda-7d6b87979719","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e604a04-c871-4739-9bda-7d6b87979719","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11a904/auth-test-model-11a904\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-11a904/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e604a04-c871-4739-9bda-7d6b87979719","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e604a04-c871-4739-9bda-7d6b87979719","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e604a04-c871-4739-9bda-7d6b87979719","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e604a04-c871-4739-9bda-7d6b87979719","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e604a04-c871-4739-9bda-7d6b87979719","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b69d595-c831-4cc4-84f5-fe151916fe13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46846","PortSpecifier":{"PortValue":46846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b69d595-c831-4cc4-84f5-fe151916fe13","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b69d595-c831-4cc4-84f5-fe151916fe13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46846","PortSpecifier":{"PortValue":46846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331245,"nanos":148039687},"http":{"id":"0b69d595-c831-4cc4-84f5-fe151916fe13","method":"POST","headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b69d595-c831-4cc4-84f5-fe151916fe13","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qfgUeUAgh8Sv0hwq_OxcCBvRxppvaq6q1nt8vkDnyVKREhaUH3Fu2BFRHZCl"} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0b69d595-c831-4cc4-84f5-fe151916fe13","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qfgUeUAgh8Sv0hwq_OxcCBvRxppvaq6q1nt8vkDnyVKREhaUH3Fu2BFRHZCl\"}"} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0b69d595-c831-4cc4-84f5-fe151916fe13","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c1eaa817-2c5c-4cb1-ad11-5485665a7cf8","keyName":"e2e-auth-iso-a-0d2e5a","subscription":"e2e-auth-iso-bb4e56","tenant":"e2e-shared-a-f0ad55","userId":"c1eaa817-2c5c-4cb1-ad11-5485665a7cf8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b69d595-c831-4cc4-84f5-fe151916fe13","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b69d595-c831-4cc4-84f5-fe151916fe13","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b69d595-c831-4cc4-84f5-fe151916fe13","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b69d595-c831-4cc4-84f5-fe151916fe13","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f0ad55/auth-test-model-f0ad55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b69d595-c831-4cc4-84f5-fe151916fe13","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0b69d595-c831-4cc4-84f5-fe151916fe13","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b69d595-c831-4cc4-84f5-fe151916fe13","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-bb4e56"} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b69d595-c831-4cc4-84f5-fe151916fe13","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b69d595-c831-4cc4-84f5-fe151916fe13","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:20:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b69d595-c831-4cc4-84f5-fe151916fe13","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86b321a1d6f31cd661e9862f3713fcd98d3ce9382fe32d1d5f01b7aa4825ae92"} {"level":"info","ts":"2026-07-29T13:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/929ede76ee5e160ea8cf6a8a8a60608403fda4afb6b4aba4978532d52121ba78"} {"level":"info","ts":"2026-07-29T13:20:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bba7da43fc806c9f0cfe0adb9e13654f704a63e23a95f4f6292b21fdaa823787"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9dbaad72e022854cc7525a5bb5bf5d2d435d85d91890b7af6ee3a371573a31b"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c030e4b38cc33ca91e89b5b63c432811d60fa8c5c50a8ebefeeb82f5994b50ab"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/210b73e2b42819ff9371fc214ec8714755eb15b81fb392bfc53099974bf28a67"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/579cee23d8ca156f73526abd684815fe5a36f2e5989282f03a0eb21f7acbfe86"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92154def4718adc770796fd2b50edd8399851880235d75a0116f7888e4d8f3b9"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ede00026c75d71b053d0d51262410cafeecd37bb1c7f893de4294b33478de6a2"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a60c8a8d2eb18b8efda1abc1a78d697593adda9763bbc04c421674d34f219f27"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/219aa4764b0d834f5c44438154527f9c4f7d1abf6c8bfc3dfc6141021abcc05a"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c84785c152c2f04fdd76d50a6005c669349c31c424dcfe1a13909603073ef930"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/466ba6c206057d067f362c0bf9eb563a740735df390b6bc56567f14e2cb4acb0"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4a4f312ac1685c134a4d7547fe9b349589dca23f3b361004eb0368e90757162"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e9108571f2c95e7f9fc6a706fe51edae5daac8ab60e796d67108c88237dee7b"} {"level":"info","ts":"2026-07-29T13:20:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6951e934e05db055d150ed78bb79869b62fad8407cd39a79600add632c107641"} {"level":"debug","ts":"2026-07-29T13:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d080d31746143f12d741a142591b22841594a9044650eb9b52a1afb50b2719e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d080d31746143f12d741a142591b22841594a9044650eb9b52a1afb50b2719e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d080d31746143f12d741a142591b22841594a9044650eb9b52a1afb50b2719e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d080d31746143f12d741a142591b22841594a9044650eb9b52a1afb50b2719e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d080d31746143f12d741a142591b22841594a9044650eb9b52a1afb50b2719e"} {"level":"debug","ts":"2026-07-29T13:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d080d31746143f12d741a142591b22841594a9044650eb9b52a1afb50b2719e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d080d31746143f12d741a142591b22841594a9044650eb9b52a1afb50b2719e"} {"level":"debug","ts":"2026-07-29T13:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d080d31746143f12d741a142591b22841594a9044650eb9b52a1afb50b2719e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d080d31746143f12d741a142591b22841594a9044650eb9b52a1afb50b2719e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d080d31746143f12d741a142591b22841594a9044650eb9b52a1afb50b2719e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d080d31746143f12d741a142591b22841594a9044650eb9b52a1afb50b2719e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d080d31746143f12d741a142591b22841594a9044650eb9b52a1afb50b2719e"} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a"} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a"} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a"} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95a58801428609b856fe546b95d8e16b29b2ce6230b73d7b4964a05e9bbe304d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95a58801428609b856fe546b95d8e16b29b2ce6230b73d7b4964a05e9bbe304d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95a58801428609b856fe546b95d8e16b29b2ce6230b73d7b4964a05e9bbe304d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95a58801428609b856fe546b95d8e16b29b2ce6230b73d7b4964a05e9bbe304d"} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95a58801428609b856fe546b95d8e16b29b2ce6230b73d7b4964a05e9bbe304d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95a58801428609b856fe546b95d8e16b29b2ce6230b73d7b4964a05e9bbe304d"} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95a58801428609b856fe546b95d8e16b29b2ce6230b73d7b4964a05e9bbe304d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95a58801428609b856fe546b95d8e16b29b2ce6230b73d7b4964a05e9bbe304d"} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95a58801428609b856fe546b95d8e16b29b2ce6230b73d7b4964a05e9bbe304d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95a58801428609b856fe546b95d8e16b29b2ce6230b73d7b4964a05e9bbe304d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a"} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95a58801428609b856fe546b95d8e16b29b2ce6230b73d7b4964a05e9bbe304d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95a58801428609b856fe546b95d8e16b29b2ce6230b73d7b4964a05e9bbe304d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95a58801428609b856fe546b95d8e16b29b2ce6230b73d7b4964a05e9bbe304d"} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55"} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55"} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55"} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d"} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d"} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d"} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d"} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d"} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d"} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a80c56dd557659e46912dd3e69fcb550334b8d4140985b6c1e003df3af88314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a80c56dd557659e46912dd3e69fcb550334b8d4140985b6c1e003df3af88314","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a80c56dd557659e46912dd3e69fcb550334b8d4140985b6c1e003df3af88314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80c56dd557659e46912dd3e69fcb550334b8d4140985b6c1e003df3af88314"} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a80c56dd557659e46912dd3e69fcb550334b8d4140985b6c1e003df3af88314","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a80c56dd557659e46912dd3e69fcb550334b8d4140985b6c1e003df3af88314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a80c56dd557659e46912dd3e69fcb550334b8d4140985b6c1e003df3af88314"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d"} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a80c56dd557659e46912dd3e69fcb550334b8d4140985b6c1e003df3af88314","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a80c56dd557659e46912dd3e69fcb550334b8d4140985b6c1e003df3af88314","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45d3c1cf4cd3f9afcdc8ec8995084702524cfa16a60e04b19c1f5ad7cd600e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a45d3c1cf4cd3f9afcdc8ec8995084702524cfa16a60e04b19c1f5ad7cd600e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80c56dd557659e46912dd3e69fcb550334b8d4140985b6c1e003df3af88314"} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a2d96d205418af32dfe0105518db2200c6af011f2b53ac70fd03672397229d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a2d96d205418af32dfe0105518db2200c6af011f2b53ac70fd03672397229d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45d3c1cf4cd3f9afcdc8ec8995084702524cfa16a60e04b19c1f5ad7cd600e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a45d3c1cf4cd3f9afcdc8ec8995084702524cfa16a60e04b19c1f5ad7cd600e1"} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a45d3c1cf4cd3f9afcdc8ec8995084702524cfa16a60e04b19c1f5ad7cd600e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a2d96d205418af32dfe0105518db2200c6af011f2b53ac70fd03672397229d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a2d96d205418af32dfe0105518db2200c6af011f2b53ac70fd03672397229d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45d3c1cf4cd3f9afcdc8ec8995084702524cfa16a60e04b19c1f5ad7cd600e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a45d3c1cf4cd3f9afcdc8ec8995084702524cfa16a60e04b19c1f5ad7cd600e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a2d96d205418af32dfe0105518db2200c6af011f2b53ac70fd03672397229d0"} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a45d3c1cf4cd3f9afcdc8ec8995084702524cfa16a60e04b19c1f5ad7cd600e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a45d3c1cf4cd3f9afcdc8ec8995084702524cfa16a60e04b19c1f5ad7cd600e1"} {"level":"info","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a2d96d205418af32dfe0105518db2200c6af011f2b53ac70fd03672397229d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a2d96d205418af32dfe0105518db2200c6af011f2b53ac70fd03672397229d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a2d96d205418af32dfe0105518db2200c6af011f2b53ac70fd03672397229d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a45d3c1cf4cd3f9afcdc8ec8995084702524cfa16a60e04b19c1f5ad7cd600e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f5226ef9ab986385f09b31b0eb676bab9c73e0e75b54345e328387fc047ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a2d96d205418af32dfe0105518db2200c6af011f2b53ac70fd03672397229d0"} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f5226ef9ab986385f09b31b0eb676bab9c73e0e75b54345e328387fc047ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a2d96d205418af32dfe0105518db2200c6af011f2b53ac70fd03672397229d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405"} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f5226ef9ab986385f09b31b0eb676bab9c73e0e75b54345e328387fc047ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f5226ef9ab986385f09b31b0eb676bab9c73e0e75b54345e328387fc047ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a45d3c1cf4cd3f9afcdc8ec8995084702524cfa16a60e04b19c1f5ad7cd600e1"} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f5226ef9ab986385f09b31b0eb676bab9c73e0e75b54345e328387fc047ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f5226ef9ab986385f09b31b0eb676bab9c73e0e75b54345e328387fc047ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f5226ef9ab986385f09b31b0eb676bab9c73e0e75b54345e328387fc047ed4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f5226ef9ab986385f09b31b0eb676bab9c73e0e75b54345e328387fc047ed4"} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7"} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67f5226ef9ab986385f09b31b0eb676bab9c73e0e75b54345e328387fc047ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67f5226ef9ab986385f09b31b0eb676bab9c73e0e75b54345e328387fc047ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67f5226ef9ab986385f09b31b0eb676bab9c73e0e75b54345e328387fc047ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a2d96d205418af32dfe0105518db2200c6af011f2b53ac70fd03672397229d0"} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67f5226ef9ab986385f09b31b0eb676bab9c73e0e75b54345e328387fc047ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405"} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67f5226ef9ab986385f09b31b0eb676bab9c73e0e75b54345e328387fc047ed4"} {"level":"info","ts":"2026-07-29T13:21:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7"} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50"} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50"} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50"} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb"} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb"} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb"} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8"} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8"} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8"} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb"} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8"} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865"} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865"} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4"} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296"} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4"} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296"} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296"} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4"} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58"} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58"} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:21:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4870194d-34b3-48cd-87c3-9ad06fb9d9e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59628","PortSpecifier":{"PortValue":59628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4870194d-34b3-48cd-87c3-9ad06fb9d9e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4870194d-34b3-48cd-87c3-9ad06fb9d9e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59628","PortSpecifier":{"PortValue":59628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331324,"nanos":492175295},"http":{"id":"4870194d-34b3-48cd-87c3-9ad06fb9d9e7","method":"POST","headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4870194d-34b3-48cd-87c3-9ad06fb9d9e7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4870194d-34b3-48cd-87c3-9ad06fb9d9e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38e69f13-34ac-4763-803d-a85ab429aa41","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"]}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4870194d-34b3-48cd-87c3-9ad06fb9d9e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38e69f13-34ac-4763-803d-a85ab429aa41","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4870194d-34b3-48cd-87c3-9ad06fb9d9e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4870194d-34b3-48cd-87c3-9ad06fb9d9e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4870194d-34b3-48cd-87c3-9ad06fb9d9e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f0ad55/sub-test-model-f0ad55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4870194d-34b3-48cd-87c3-9ad06fb9d9e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4870194d-34b3-48cd-87c3-9ad06fb9d9e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4870194d-34b3-48cd-87c3-9ad06fb9d9e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4870194d-34b3-48cd-87c3-9ad06fb9d9e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4870194d-34b3-48cd-87c3-9ad06fb9d9e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"076b3e67-6ea6-47b5-8aaa-4685e606c8f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34830","PortSpecifier":{"PortValue":34830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"076b3e67-6ea6-47b5-8aaa-4685e606c8f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"076b3e67-6ea6-47b5-8aaa-4685e606c8f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34830","PortSpecifier":{"PortValue":34830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331324,"nanos":537166090},"http":{"id":"076b3e67-6ea6-47b5-8aaa-4685e606c8f9","method":"POST","headers":{":authority":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"076b3e67-6ea6-47b5-8aaa-4685e606c8f9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"076b3e67-6ea6-47b5-8aaa-4685e606c8f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38e69f13-34ac-4763-803d-a85ab429aa41","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"]}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"076b3e67-6ea6-47b5-8aaa-4685e606c8f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38e69f13-34ac-4763-803d-a85ab429aa41","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"076b3e67-6ea6-47b5-8aaa-4685e606c8f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"076b3e67-6ea6-47b5-8aaa-4685e606c8f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"076b3e67-6ea6-47b5-8aaa-4685e606c8f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11a904/sub-test-model-11a904\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-11a904/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"076b3e67-6ea6-47b5-8aaa-4685e606c8f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"076b3e67-6ea6-47b5-8aaa-4685e606c8f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"076b3e67-6ea6-47b5-8aaa-4685e606c8f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"076b3e67-6ea6-47b5-8aaa-4685e606c8f9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"076b3e67-6ea6-47b5-8aaa-4685e606c8f9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73fa0711-22e6-4087-824c-4520b77a6193","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59630","PortSpecifier":{"PortValue":59630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73fa0711-22e6-4087-824c-4520b77a6193","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73fa0711-22e6-4087-824c-4520b77a6193","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59630","PortSpecifier":{"PortValue":59630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331324,"nanos":576254525},"http":{"id":"73fa0711-22e6-4087-824c-4520b77a6193","method":"GET","headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73fa0711-22e6-4087-824c-4520b77a6193","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fC2MykqyGOCkxGJN_s9JDE0YXAKwWGgNckZx4eH6USTPsEl5xVuYreGLPcpk"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73fa0711-22e6-4087-824c-4520b77a6193","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fC2MykqyGOCkxGJN_s9JDE0YXAKwWGgNckZx4eH6USTPsEl5xVuYreGLPcpk\"}"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73fa0711-22e6-4087-824c-4520b77a6193","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"58676862-2d7f-433f-bbf0-399419ee22e5","keyName":"e2e-sub-iso-c11b1e","subscription":"e2e-a-only-b2bbe4","tenant":"e2e-shared-a-f0ad55","userId":"58676862-2d7f-433f-bbf0-399419ee22e5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73fa0711-22e6-4087-824c-4520b77a6193","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73fa0711-22e6-4087-824c-4520b77a6193","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73fa0711-22e6-4087-824c-4520b77a6193","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73fa0711-22e6-4087-824c-4520b77a6193","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f0ad55/sub-test-model-f0ad55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73fa0711-22e6-4087-824c-4520b77a6193","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73fa0711-22e6-4087-824c-4520b77a6193","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73fa0711-22e6-4087-824c-4520b77a6193","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73fa0711-22e6-4087-824c-4520b77a6193","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-b2bbe4"} {"level":"info","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73fa0711-22e6-4087-824c-4520b77a6193","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73fa0711-22e6-4087-824c-4520b77a6193","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b445938-c8c1-45c4-ab05-6e5b766dbfd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34834","PortSpecifier":{"PortValue":34834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b445938-c8c1-45c4-ab05-6e5b766dbfd1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b445938-c8c1-45c4-ab05-6e5b766dbfd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:34834","PortSpecifier":{"PortValue":34834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331324,"nanos":617056342},"http":{"id":"1b445938-c8c1-45c4-ab05-6e5b766dbfd1","method":"GET","headers":{":authority":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b445938-c8c1-45c4-ab05-6e5b766dbfd1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UdZt1Z1Rbo7TMnaA_IFMV3PUgtlRKMXL8nqc8NOzv7JHCgD14fGdFRG1lfaj"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1b445938-c8c1-45c4-ab05-6e5b766dbfd1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-11a904.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UdZt1Z1Rbo7TMnaA_IFMV3PUgtlRKMXL8nqc8NOzv7JHCgD14fGdFRG1lfaj\"}"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1b445938-c8c1-45c4-ab05-6e5b766dbfd1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-11a904.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"21b2d647-5956-4993-9226-bb4960b23c02","keyName":"e2e-sub-iso-1b0056","subscription":"e2e-b-only-b2bbe4","tenant":"e2e-shared-b-11a904","userId":"21b2d647-5956-4993-9226-bb4960b23c02","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b445938-c8c1-45c4-ab05-6e5b766dbfd1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b445938-c8c1-45c4-ab05-6e5b766dbfd1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b445938-c8c1-45c4-ab05-6e5b766dbfd1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b445938-c8c1-45c4-ab05-6e5b766dbfd1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11a904/sub-test-model-11a904\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-11a904/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b445938-c8c1-45c4-ab05-6e5b766dbfd1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b445938-c8c1-45c4-ab05-6e5b766dbfd1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-b2bbe4"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b445938-c8c1-45c4-ab05-6e5b766dbfd1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b445938-c8c1-45c4-ab05-6e5b766dbfd1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b445938-c8c1-45c4-ab05-6e5b766dbfd1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:22:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b445938-c8c1-45c4-ab05-6e5b766dbfd1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58"} {"level":"info","ts":"2026-07-29T13:22:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"info","ts":"2026-07-29T13:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865"} {"level":"info","ts":"2026-07-29T13:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4"} {"level":"info","ts":"2026-07-29T13:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8"} {"level":"info","ts":"2026-07-29T13:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb"} {"level":"info","ts":"2026-07-29T13:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296"} {"level":"info","ts":"2026-07-29T13:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"} {"level":"info","ts":"2026-07-29T13:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50"} {"level":"info","ts":"2026-07-29T13:22:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50"} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865"} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296"} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8"} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8"} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:22:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"} {"level":"info","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"267556a8-db93-41be-9ec6-17bacbfe0792","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44154","PortSpecifier":{"PortValue":44154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"267556a8-db93-41be-9ec6-17bacbfe0792","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"267556a8-db93-41be-9ec6-17bacbfe0792","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44154","PortSpecifier":{"PortValue":44154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331365,"nanos":828705552},"http":{"id":"267556a8-db93-41be-9ec6-17bacbfe0792","method":"POST","headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"267556a8-db93-41be-9ec6-17bacbfe0792","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"267556a8-db93-41be-9ec6-17bacbfe0792","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38e69f13-34ac-4763-803d-a85ab429aa41","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"]}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"267556a8-db93-41be-9ec6-17bacbfe0792","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38e69f13-34ac-4763-803d-a85ab429aa41","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"267556a8-db93-41be-9ec6-17bacbfe0792","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"267556a8-db93-41be-9ec6-17bacbfe0792","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"267556a8-db93-41be-9ec6-17bacbfe0792","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f0ad55/sub-test-model-f0ad55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"267556a8-db93-41be-9ec6-17bacbfe0792","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"267556a8-db93-41be-9ec6-17bacbfe0792","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"267556a8-db93-41be-9ec6-17bacbfe0792","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"267556a8-db93-41be-9ec6-17bacbfe0792","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"267556a8-db93-41be-9ec6-17bacbfe0792","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16768711-bf0d-42d3-8acc-1337386d26dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49216","PortSpecifier":{"PortValue":49216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16768711-bf0d-42d3-8acc-1337386d26dd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16768711-bf0d-42d3-8acc-1337386d26dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49216","PortSpecifier":{"PortValue":49216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331365,"nanos":871358199},"http":{"id":"16768711-bf0d-42d3-8acc-1337386d26dd","method":"POST","headers":{":authority":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16768711-bf0d-42d3-8acc-1337386d26dd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16768711-bf0d-42d3-8acc-1337386d26dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38e69f13-34ac-4763-803d-a85ab429aa41","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"]}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16768711-bf0d-42d3-8acc-1337386d26dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38e69f13-34ac-4763-803d-a85ab429aa41","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16768711-bf0d-42d3-8acc-1337386d26dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16768711-bf0d-42d3-8acc-1337386d26dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16768711-bf0d-42d3-8acc-1337386d26dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11a904/sub-test-model-11a904\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-11a904/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16768711-bf0d-42d3-8acc-1337386d26dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16768711-bf0d-42d3-8acc-1337386d26dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16768711-bf0d-42d3-8acc-1337386d26dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16768711-bf0d-42d3-8acc-1337386d26dd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16768711-bf0d-42d3-8acc-1337386d26dd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"386c5114-0037-42be-ac6d-ae6a63d2215a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44170","PortSpecifier":{"PortValue":44170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"386c5114-0037-42be-ac6d-ae6a63d2215a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"386c5114-0037-42be-ac6d-ae6a63d2215a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44170","PortSpecifier":{"PortValue":44170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331365,"nanos":924053595},"http":{"id":"386c5114-0037-42be-ac6d-ae6a63d2215a","method":"POST","headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"386c5114-0037-42be-ac6d-ae6a63d2215a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12KGbFIP6Z688L1kG_RjoqJKEVq0cKYAeC9k5Xd2pGfEI9r3cfomjaNtw9Y6w"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"386c5114-0037-42be-ac6d-ae6a63d2215a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12KGbFIP6Z688L1kG_RjoqJKEVq0cKYAeC9k5Xd2pGfEI9r3cfomjaNtw9Y6w\"}"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"386c5114-0037-42be-ac6d-ae6a63d2215a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e2a4ca49-6f5d-481e-828a-834feb084c84","keyName":"e2e-sub-iso-e25111","subscription":"e2e-shared-sub-42a7b1","tenant":"e2e-shared-a-f0ad55","userId":"e2a4ca49-6f5d-481e-828a-834feb084c84","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"386c5114-0037-42be-ac6d-ae6a63d2215a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"386c5114-0037-42be-ac6d-ae6a63d2215a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"386c5114-0037-42be-ac6d-ae6a63d2215a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"386c5114-0037-42be-ac6d-ae6a63d2215a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f0ad55/sub-test-model-f0ad55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"386c5114-0037-42be-ac6d-ae6a63d2215a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"386c5114-0037-42be-ac6d-ae6a63d2215a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"386c5114-0037-42be-ac6d-ae6a63d2215a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"386c5114-0037-42be-ac6d-ae6a63d2215a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-42a7b1"} {"level":"info","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"386c5114-0037-42be-ac6d-ae6a63d2215a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"386c5114-0037-42be-ac6d-ae6a63d2215a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21e6cce4-401b-41b1-829c-4eb90ffb6542","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49220","PortSpecifier":{"PortValue":49220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21e6cce4-401b-41b1-829c-4eb90ffb6542","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21e6cce4-401b-41b1-829c-4eb90ffb6542","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49220","PortSpecifier":{"PortValue":49220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331365,"nanos":955163966},"http":{"id":"21e6cce4-401b-41b1-829c-4eb90ffb6542","method":"POST","headers":{":authority":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21e6cce4-401b-41b1-829c-4eb90ffb6542","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bE1CwqG5Zw43zcEa_sWBai0kcUd48AduN6vX3K8JyLWBkgCQ01JslWk5pr1B"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21e6cce4-401b-41b1-829c-4eb90ffb6542","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-11a904.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bE1CwqG5Zw43zcEa_sWBai0kcUd48AduN6vX3K8JyLWBkgCQ01JslWk5pr1B\"}"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21e6cce4-401b-41b1-829c-4eb90ffb6542","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-11a904.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e462e0fe-9a8c-456f-b469-73543fda4655","keyName":"e2e-sub-iso-86699c","subscription":"e2e-shared-sub-42a7b1","tenant":"e2e-shared-b-11a904","userId":"e462e0fe-9a8c-456f-b469-73543fda4655","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21e6cce4-401b-41b1-829c-4eb90ffb6542","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21e6cce4-401b-41b1-829c-4eb90ffb6542","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21e6cce4-401b-41b1-829c-4eb90ffb6542","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21e6cce4-401b-41b1-829c-4eb90ffb6542","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11a904/sub-test-model-11a904\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-11a904/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21e6cce4-401b-41b1-829c-4eb90ffb6542","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21e6cce4-401b-41b1-829c-4eb90ffb6542","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21e6cce4-401b-41b1-829c-4eb90ffb6542","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-42a7b1"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21e6cce4-401b-41b1-829c-4eb90ffb6542","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21e6cce4-401b-41b1-829c-4eb90ffb6542","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:22:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21e6cce4-401b-41b1-829c-4eb90ffb6542","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37e41b95558ee531d9cc1e0ed3abaadb045c4eced3e2a9b0108ea98dd2937fd8"} {"level":"info","ts":"2026-07-29T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b119e7b96b99ba671b624bac5b9d50e56aba9264524144006706ec8a1726296"} {"level":"info","ts":"2026-07-29T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b740fd7e8884abf4672fe76453a09b75dbde6a6f0d8a7ff08efd51abb752c51"} {"level":"info","ts":"2026-07-29T13:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a2d96d205418af32dfe0105518db2200c6af011f2b53ac70fd03672397229d0"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b547433f89e75d3874aa4ae5ab5cd44e614aa8554a4cc288c126835f2a6d32d"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/867a0eb70121f840851350c3cd7814ccf5d6bf2ac9c1a9a648f0944e1d37bf58"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdf6b6b764dabdb7c1ca77946e6e02dc405384afe00001406404bd6b38578e3a"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fe4f95240b7c9aafd2ba6386554d9d1daaa01eb9d6db41dfee902a6ba51c865"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67f5226ef9ab986385f09b31b0eb676bab9c73e0e75b54345e328387fc047ed4"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a80c56dd557659e46912dd3e69fcb550334b8d4140985b6c1e003df3af88314"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95a58801428609b856fe546b95d8e16b29b2ce6230b73d7b4964a05e9bbe304d"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d080d31746143f12d741a142591b22841594a9044650eb9b52a1afb50b2719e"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a45d3c1cf4cd3f9afcdc8ec8995084702524cfa16a60e04b19c1f5ad7cd600e1"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/406cbe266b9ce141752154da23d28e1698644039b675d1cce5c9f6b550b44ce4"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/367c4e90342a32f06c3c111352740b1dd23c2038ffff1dac147a906c43845c50"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cee48d9ff1422030a99b537cd90dc04619e9da7f3dce43ea45ed04569d4283bb"} {"level":"debug","ts":"2026-07-29T13:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8"} {"level":"info","ts":"2026-07-29T13:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8"} {"level":"debug","ts":"2026-07-29T13:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8"} {"level":"info","ts":"2026-07-29T13:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfec98d6702cd90159951b64c7ff69a17e3591bde749f92cd224970aa84049e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8"} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfec98d6702cd90159951b64c7ff69a17e3591bde749f92cd224970aa84049e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfec98d6702cd90159951b64c7ff69a17e3591bde749f92cd224970aa84049e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfec98d6702cd90159951b64c7ff69a17e3591bde749f92cd224970aa84049e0"} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfec98d6702cd90159951b64c7ff69a17e3591bde749f92cd224970aa84049e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfec98d6702cd90159951b64c7ff69a17e3591bde749f92cd224970aa84049e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfec98d6702cd90159951b64c7ff69a17e3591bde749f92cd224970aa84049e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8"} {"level":"error","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bfec98d6702cd90159951b64c7ff69a17e3591bde749f92cd224970aa84049e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bfec98d6702cd90159951b64c7ff69a17e3591bde749f92cd224970aa84049e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfec98d6702cd90159951b64c7ff69a17e3591bde749f92cd224970aa84049e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfec98d6702cd90159951b64c7ff69a17e3591bde749f92cd224970aa84049e0"} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfec98d6702cd90159951b64c7ff69a17e3591bde749f92cd224970aa84049e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfec98d6702cd90159951b64c7ff69a17e3591bde749f92cd224970aa84049e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfec98d6702cd90159951b64c7ff69a17e3591bde749f92cd224970aa84049e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfec98d6702cd90159951b64c7ff69a17e3591bde749f92cd224970aa84049e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfec98d6702cd90159951b64c7ff69a17e3591bde749f92cd224970aa84049e0"} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55"} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55"} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55"} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f776a885d2a1371f845812b509af054a2766ca11d7701ff02b008f842c7d60d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f776a885d2a1371f845812b509af054a2766ca11d7701ff02b008f842c7d60d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f776a885d2a1371f845812b509af054a2766ca11d7701ff02b008f842c7d60d"} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f776a885d2a1371f845812b509af054a2766ca11d7701ff02b008f842c7d60d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f776a885d2a1371f845812b509af054a2766ca11d7701ff02b008f842c7d60d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815"} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f776a885d2a1371f845812b509af054a2766ca11d7701ff02b008f842c7d60d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f776a885d2a1371f845812b509af054a2766ca11d7701ff02b008f842c7d60d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f776a885d2a1371f845812b509af054a2766ca11d7701ff02b008f842c7d60d"} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f776a885d2a1371f845812b509af054a2766ca11d7701ff02b008f842c7d60d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f776a885d2a1371f845812b509af054a2766ca11d7701ff02b008f842c7d60d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f776a885d2a1371f845812b509af054a2766ca11d7701ff02b008f842c7d60d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815"} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f776a885d2a1371f845812b509af054a2766ca11d7701ff02b008f842c7d60d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f776a885d2a1371f845812b509af054a2766ca11d7701ff02b008f842c7d60d"} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f776a885d2a1371f845812b509af054a2766ca11d7701ff02b008f842c7d60d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815"} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f776a885d2a1371f845812b509af054a2766ca11d7701ff02b008f842c7d60d"} {"level":"error","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815"} {"level":"error","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815"} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7"} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815"} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7"} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7"} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7"} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7"} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6fbd54755f81cbf294d3ecba26dd3c56ce35a8c8c869ee7d85cbaa3e3d82bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6fbd54755f81cbf294d3ecba26dd3c56ce35a8c8c869ee7d85cbaa3e3d82bcb"} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6fbd54755f81cbf294d3ecba26dd3c56ce35a8c8c869ee7d85cbaa3e3d82bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6fbd54755f81cbf294d3ecba26dd3c56ce35a8c8c869ee7d85cbaa3e3d82bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6fbd54755f81cbf294d3ecba26dd3c56ce35a8c8c869ee7d85cbaa3e3d82bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a6fbd54755f81cbf294d3ecba26dd3c56ce35a8c8c869ee7d85cbaa3e3d82bcb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a6fbd54755f81cbf294d3ecba26dd3c56ce35a8c8c869ee7d85cbaa3e3d82bcb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6fbd54755f81cbf294d3ecba26dd3c56ce35a8c8c869ee7d85cbaa3e3d82bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6fbd54755f81cbf294d3ecba26dd3c56ce35a8c8c869ee7d85cbaa3e3d82bcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6fbd54755f81cbf294d3ecba26dd3c56ce35a8c8c869ee7d85cbaa3e3d82bcb"} {"level":"debug","ts":"2026-07-29T13:23:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6fbd54755f81cbf294d3ecba26dd3c56ce35a8c8c869ee7d85cbaa3e3d82bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6fbd54755f81cbf294d3ecba26dd3c56ce35a8c8c869ee7d85cbaa3e3d82bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6fbd54755f81cbf294d3ecba26dd3c56ce35a8c8c869ee7d85cbaa3e3d82bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6fbd54755f81cbf294d3ecba26dd3c56ce35a8c8c869ee7d85cbaa3e3d82bcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6fbd54755f81cbf294d3ecba26dd3c56ce35a8c8c869ee7d85cbaa3e3d82bcb"} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9d500468f0a82c6de5e86f10f82a8216f9b09531c016495aead1e7f8125ddf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9d500468f0a82c6de5e86f10f82a8216f9b09531c016495aead1e7f8125ddf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9d500468f0a82c6de5e86f10f82a8216f9b09531c016495aead1e7f8125ddf2"} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9d500468f0a82c6de5e86f10f82a8216f9b09531c016495aead1e7f8125ddf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9d500468f0a82c6de5e86f10f82a8216f9b09531c016495aead1e7f8125ddf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3"} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9d500468f0a82c6de5e86f10f82a8216f9b09531c016495aead1e7f8125ddf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405"} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"699cf2f1f827a776c26bc58d496c80705d6c40781f2e57e4a46329b29953f659","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9d500468f0a82c6de5e86f10f82a8216f9b09531c016495aead1e7f8125ddf2"} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"699cf2f1f827a776c26bc58d496c80705d6c40781f2e57e4a46329b29953f659","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9d500468f0a82c6de5e86f10f82a8216f9b09531c016495aead1e7f8125ddf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"699cf2f1f827a776c26bc58d496c80705d6c40781f2e57e4a46329b29953f659","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/699cf2f1f827a776c26bc58d496c80705d6c40781f2e57e4a46329b29953f659"} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"699cf2f1f827a776c26bc58d496c80705d6c40781f2e57e4a46329b29953f659","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3"} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"699cf2f1f827a776c26bc58d496c80705d6c40781f2e57e4a46329b29953f659","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["699cf2f1f827a776c26bc58d496c80705d6c40781f2e57e4a46329b29953f659"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405"} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"699cf2f1f827a776c26bc58d496c80705d6c40781f2e57e4a46329b29953f659","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/699cf2f1f827a776c26bc58d496c80705d6c40781f2e57e4a46329b29953f659"} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"699cf2f1f827a776c26bc58d496c80705d6c40781f2e57e4a46329b29953f659","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3"} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405"} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/699cf2f1f827a776c26bc58d496c80705d6c40781f2e57e4a46329b29953f659"} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3"} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405"} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3"} {"level":"info","ts":"2026-07-29T13:23:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405"} {"level":"debug","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30"} {"level":"debug","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30"} {"level":"debug","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30"} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30"} {"level":"error","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"} {"level":"debug","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30"} {"level":"info","ts":"2026-07-29T13:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad"} {"level":"error","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"error","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385"} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0"} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7"} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a"} {"level":"info","ts":"2026-07-29T13:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:23:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:23:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7"} {"level":"info","ts":"2026-07-29T13:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0"} {"level":"info","ts":"2026-07-29T13:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7"} {"level":"info","ts":"2026-07-29T13:23:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a"} {"level":"info","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"438bfe2a-8600-4c43-8972-668ebbc1f0fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45854","PortSpecifier":{"PortValue":45854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"438bfe2a-8600-4c43-8972-668ebbc1f0fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"438bfe2a-8600-4c43-8972-668ebbc1f0fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45854","PortSpecifier":{"PortValue":45854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331445,"nanos":75985082},"http":{"id":"438bfe2a-8600-4c43-8972-668ebbc1f0fb","method":"POST","headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"438bfe2a-8600-4c43-8972-668ebbc1f0fb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"438bfe2a-8600-4c43-8972-668ebbc1f0fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38e69f13-34ac-4763-803d-a85ab429aa41","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"]}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"438bfe2a-8600-4c43-8972-668ebbc1f0fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38e69f13-34ac-4763-803d-a85ab429aa41","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"438bfe2a-8600-4c43-8972-668ebbc1f0fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"438bfe2a-8600-4c43-8972-668ebbc1f0fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"438bfe2a-8600-4c43-8972-668ebbc1f0fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"438bfe2a-8600-4c43-8972-668ebbc1f0fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"438bfe2a-8600-4c43-8972-668ebbc1f0fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"438bfe2a-8600-4c43-8972-668ebbc1f0fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"438bfe2a-8600-4c43-8972-668ebbc1f0fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"438bfe2a-8600-4c43-8972-668ebbc1f0fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16800a60-e25a-9e3c-87b0-bb5071fc7220","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41140","PortSpecifier":{"PortValue":41140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16800a60-e25a-9e3c-87b0-bb5071fc7220","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16800a60-e25a-9e3c-87b0-bb5071fc7220","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41140","PortSpecifier":{"PortValue":41140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331445,"nanos":121224188},"http":{"id":"16800a60-e25a-9e3c-87b0-bb5071fc7220","method":"POST","headers":{":authority":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16800a60-e25a-9e3c-87b0-bb5071fc7220","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16800a60-e25a-9e3c-87b0-bb5071fc7220","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38e69f13-34ac-4763-803d-a85ab429aa41","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"]}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16800a60-e25a-9e3c-87b0-bb5071fc7220","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38e69f13-34ac-4763-803d-a85ab429aa41","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16800a60-e25a-9e3c-87b0-bb5071fc7220","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16800a60-e25a-9e3c-87b0-bb5071fc7220","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16800a60-e25a-9e3c-87b0-bb5071fc7220","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11a904/rate-test-model-11a904\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-11a904/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16800a60-e25a-9e3c-87b0-bb5071fc7220","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16800a60-e25a-9e3c-87b0-bb5071fc7220","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16800a60-e25a-9e3c-87b0-bb5071fc7220","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16800a60-e25a-9e3c-87b0-bb5071fc7220","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16800a60-e25a-9e3c-87b0-bb5071fc7220","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45858","PortSpecifier":{"PortValue":45858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","method":"POST","path":"/ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55/v1/completions","host":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45858","PortSpecifier":{"PortValue":45858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331445,"nanos":161211526},"http":{"id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","method":"POST","headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-M3FXnpc3IzHaMuMn_vmcsp5WSIFMsrqPPvekUnU8yF37uLFqQT1q7EnYP6vy"} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-M3FXnpc3IzHaMuMn_vmcsp5WSIFMsrqPPvekUnU8yF37uLFqQT1q7EnYP6vy\"}"} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"612b752e-a18d-4763-9543-fdf79c304fcf","keyName":"e2e-rate-a-c86be4","subscription":"e2e-rate-iso-a-c86be4","tenant":"e2e-shared-a-f0ad55","userId":"612b752e-a18d-4763-9543-fdf79c304fcf","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55\",\"requestedSubscription\":\"e2e-rate-iso-a-c86be4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m","name":"rate-test-model-f0ad55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c86be4","namespace":"ai-tenant-e2e-shared-a-f0ad55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55"}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c86be4"} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"612b752e-a18d-4763-9543-fdf79c304fcf","keyName":"e2e-rate-a-c86be4","selected_subscription":"e2e-rate-iso-a-c86be4","selected_subscription_key":"ai-tenant-e2e-shared-a-f0ad55/e2e-rate-iso-a-c86be4@ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m","name":"rate-test-model-f0ad55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c86be4","namespace":"ai-tenant-e2e-shared-a-f0ad55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:24:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a47619b1-064b-4714-b454-e9a1a2cbd5d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45874","PortSpecifier":{"PortValue":45874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"636292cf-d651-4e6c-abe4-aa7530d2481f","method":"POST","path":"/ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55/v1/completions","host":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45874","PortSpecifier":{"PortValue":45874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331446,"nanos":248954316},"http":{"id":"636292cf-d651-4e6c-abe4-aa7530d2481f","method":"POST","headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-M3FXnpc3IzHaMuMn_vmcsp5WSIFMsrqPPvekUnU8yF37uLFqQT1q7EnYP6vy"} {"level":"debug","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-M3FXnpc3IzHaMuMn_vmcsp5WSIFMsrqPPvekUnU8yF37uLFqQT1q7EnYP6vy\"}"} {"level":"debug","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"612b752e-a18d-4763-9543-fdf79c304fcf","keyName":"e2e-rate-a-c86be4","subscription":"e2e-rate-iso-a-c86be4","tenant":"e2e-shared-a-f0ad55","userId":"612b752e-a18d-4763-9543-fdf79c304fcf","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55\",\"requestedSubscription\":\"e2e-rate-iso-a-c86be4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m","name":"rate-test-model-f0ad55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c86be4","namespace":"ai-tenant-e2e-shared-a-f0ad55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55"}} {"level":"debug","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c86be4"} {"level":"debug","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"612b752e-a18d-4763-9543-fdf79c304fcf","keyName":"e2e-rate-a-c86be4","selected_subscription":"e2e-rate-iso-a-c86be4","selected_subscription_key":"ai-tenant-e2e-shared-a-f0ad55/e2e-rate-iso-a-c86be4@ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m","name":"rate-test-model-f0ad55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c86be4","namespace":"ai-tenant-e2e-shared-a-f0ad55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:24:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"636292cf-d651-4e6c-abe4-aa7530d2481f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45888","PortSpecifier":{"PortValue":45888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","method":"POST","path":"/ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55/v1/completions","host":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45888","PortSpecifier":{"PortValue":45888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331447,"nanos":296768808},"http":{"id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","method":"POST","headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-M3FXnpc3IzHaMuMn_vmcsp5WSIFMsrqPPvekUnU8yF37uLFqQT1q7EnYP6vy"} {"level":"debug","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-M3FXnpc3IzHaMuMn_vmcsp5WSIFMsrqPPvekUnU8yF37uLFqQT1q7EnYP6vy\"}"} {"level":"debug","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"612b752e-a18d-4763-9543-fdf79c304fcf","keyName":"e2e-rate-a-c86be4","subscription":"e2e-rate-iso-a-c86be4","tenant":"e2e-shared-a-f0ad55","userId":"612b752e-a18d-4763-9543-fdf79c304fcf","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55\",\"requestedSubscription\":\"e2e-rate-iso-a-c86be4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m","name":"rate-test-model-f0ad55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c86be4","namespace":"ai-tenant-e2e-shared-a-f0ad55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55"}} {"level":"debug","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c86be4"} {"level":"debug","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"612b752e-a18d-4763-9543-fdf79c304fcf","keyName":"e2e-rate-a-c86be4","selected_subscription":"e2e-rate-iso-a-c86be4","selected_subscription_key":"ai-tenant-e2e-shared-a-f0ad55/e2e-rate-iso-a-c86be4@ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m","name":"rate-test-model-f0ad55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c86be4","namespace":"ai-tenant-e2e-shared-a-f0ad55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:24:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f47a46ae-56b8-445f-a1ee-3535abe5a524","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:24:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"info","ts":"2026-07-29T13:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"info","ts":"2026-07-29T13:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad"} {"level":"info","ts":"2026-07-29T13:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7"} {"level":"info","ts":"2026-07-29T13:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0"} {"level":"info","ts":"2026-07-29T13:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385"} {"level":"info","ts":"2026-07-29T13:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30"} {"level":"info","ts":"2026-07-29T13:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a"} {"level":"info","ts":"2026-07-29T13:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"} {"level":"info","ts":"2026-07-29T13:24:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"error","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7"} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"} {"level":"info","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30"} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30"} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30"} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad"} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad"} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a"} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0"} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385"} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:24:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a"} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0"} {"level":"info","ts":"2026-07-29T13:24:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385"} {"level":"info","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"512934f5-3840-4db5-bd0e-889c2768b389","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59448","PortSpecifier":{"PortValue":59448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"512934f5-3840-4db5-bd0e-889c2768b389","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"512934f5-3840-4db5-bd0e-889c2768b389","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59448","PortSpecifier":{"PortValue":59448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331487,"nanos":21371356},"http":{"id":"512934f5-3840-4db5-bd0e-889c2768b389","method":"POST","headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"512934f5-3840-4db5-bd0e-889c2768b389","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"512934f5-3840-4db5-bd0e-889c2768b389","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38e69f13-34ac-4763-803d-a85ab429aa41","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"]}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"512934f5-3840-4db5-bd0e-889c2768b389","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38e69f13-34ac-4763-803d-a85ab429aa41","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"512934f5-3840-4db5-bd0e-889c2768b389","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"512934f5-3840-4db5-bd0e-889c2768b389","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"512934f5-3840-4db5-bd0e-889c2768b389","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"512934f5-3840-4db5-bd0e-889c2768b389","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"512934f5-3840-4db5-bd0e-889c2768b389","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"512934f5-3840-4db5-bd0e-889c2768b389","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"512934f5-3840-4db5-bd0e-889c2768b389","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"512934f5-3840-4db5-bd0e-889c2768b389","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72f42bb1-0680-4df0-8c66-4fa2a396153a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41344","PortSpecifier":{"PortValue":41344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72f42bb1-0680-4df0-8c66-4fa2a396153a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72f42bb1-0680-4df0-8c66-4fa2a396153a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41344","PortSpecifier":{"PortValue":41344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331487,"nanos":59409619},"http":{"id":"72f42bb1-0680-4df0-8c66-4fa2a396153a","method":"POST","headers":{":authority":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72f42bb1-0680-4df0-8c66-4fa2a396153a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72f42bb1-0680-4df0-8c66-4fa2a396153a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38e69f13-34ac-4763-803d-a85ab429aa41","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"]}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72f42bb1-0680-4df0-8c66-4fa2a396153a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38e69f13-34ac-4763-803d-a85ab429aa41","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72f42bb1-0680-4df0-8c66-4fa2a396153a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72f42bb1-0680-4df0-8c66-4fa2a396153a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72f42bb1-0680-4df0-8c66-4fa2a396153a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11a904/rate-test-model-11a904\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-11a904/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72f42bb1-0680-4df0-8c66-4fa2a396153a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72f42bb1-0680-4df0-8c66-4fa2a396153a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72f42bb1-0680-4df0-8c66-4fa2a396153a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72f42bb1-0680-4df0-8c66-4fa2a396153a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72f42bb1-0680-4df0-8c66-4fa2a396153a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59456","PortSpecifier":{"PortValue":59456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","method":"POST","path":"/ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55/v1/completions","host":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59456","PortSpecifier":{"PortValue":59456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331487,"nanos":104073577},"http":{"id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","method":"POST","headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dWS9Zo2CUWWNEkAq_NSHSukGUeYQQKQ8ROoQRChMSpe8SJ0YQIURzdBvCrY8"} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dWS9Zo2CUWWNEkAq_NSHSukGUeYQQKQ8ROoQRChMSpe8SJ0YQIURzdBvCrY8\"}"} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a0375806-06de-4f0c-a4aa-5dd3f5f7d643","keyName":"e2e-rate-a-1baec4","subscription":"e2e-rate-iso-a-1baec4","tenant":"e2e-shared-a-f0ad55","userId":"a0375806-06de-4f0c-a4aa-5dd3f5f7d643","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55\",\"requestedSubscription\":\"e2e-rate-iso-a-1baec4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m","name":"rate-test-model-f0ad55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1baec4","namespace":"ai-tenant-e2e-shared-a-f0ad55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55"}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1baec4"} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a0375806-06de-4f0c-a4aa-5dd3f5f7d643","keyName":"e2e-rate-a-1baec4","selected_subscription":"e2e-rate-iso-a-1baec4","selected_subscription_key":"ai-tenant-e2e-shared-a-f0ad55/e2e-rate-iso-a-1baec4@ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m","name":"rate-test-model-f0ad55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1baec4","namespace":"ai-tenant-e2e-shared-a-f0ad55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:24:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bda6f138-5898-4b32-b37d-2a4c6c72062b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59458","PortSpecifier":{"PortValue":59458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","method":"POST","path":"/ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55/v1/completions","host":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59458","PortSpecifier":{"PortValue":59458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331488,"nanos":144563280},"http":{"id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","method":"POST","headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dWS9Zo2CUWWNEkAq_NSHSukGUeYQQKQ8ROoQRChMSpe8SJ0YQIURzdBvCrY8"} {"level":"debug","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dWS9Zo2CUWWNEkAq_NSHSukGUeYQQKQ8ROoQRChMSpe8SJ0YQIURzdBvCrY8\"}"} {"level":"debug","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a0375806-06de-4f0c-a4aa-5dd3f5f7d643","keyName":"e2e-rate-a-1baec4","subscription":"e2e-rate-iso-a-1baec4","tenant":"e2e-shared-a-f0ad55","userId":"a0375806-06de-4f0c-a4aa-5dd3f5f7d643","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55\",\"requestedSubscription\":\"e2e-rate-iso-a-1baec4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m","name":"rate-test-model-f0ad55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1baec4","namespace":"ai-tenant-e2e-shared-a-f0ad55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55"}} {"level":"debug","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1baec4"} {"level":"debug","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a0375806-06de-4f0c-a4aa-5dd3f5f7d643","keyName":"e2e-rate-a-1baec4","selected_subscription":"e2e-rate-iso-a-1baec4","selected_subscription_key":"ai-tenant-e2e-shared-a-f0ad55/e2e-rate-iso-a-1baec4@ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m","name":"rate-test-model-f0ad55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1baec4","namespace":"ai-tenant-e2e-shared-a-f0ad55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:24:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a889a7e-dead-4830-8dac-6ab45201a7a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59466","PortSpecifier":{"PortValue":59466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","method":"POST","path":"/ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55/v1/completions","host":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59466","PortSpecifier":{"PortValue":59466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331489,"nanos":187199144},"http":{"id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","method":"POST","headers":{":authority":"e2e-shared-a-f0ad55.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dWS9Zo2CUWWNEkAq_NSHSukGUeYQQKQ8ROoQRChMSpe8SJ0YQIURzdBvCrY8"} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dWS9Zo2CUWWNEkAq_NSHSukGUeYQQKQ8ROoQRChMSpe8SJ0YQIURzdBvCrY8\"}"} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a0375806-06de-4f0c-a4aa-5dd3f5f7d643","keyName":"e2e-rate-a-1baec4","subscription":"e2e-rate-iso-a-1baec4","tenant":"e2e-shared-a-f0ad55","userId":"a0375806-06de-4f0c-a4aa-5dd3f5f7d643","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55\",\"requestedSubscription\":\"e2e-rate-iso-a-1baec4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f0ad55.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m","name":"rate-test-model-f0ad55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1baec4","namespace":"ai-tenant-e2e-shared-a-f0ad55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55"}} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1baec4"} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a0375806-06de-4f0c-a4aa-5dd3f5f7d643","keyName":"e2e-rate-a-1baec4","selected_subscription":"e2e-rate-iso-a-1baec4","selected_subscription_key":"ai-tenant-e2e-shared-a-f0ad55/e2e-rate-iso-a-1baec4@ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f0ad55/models/facebook/opt-125m","name":"rate-test-model-f0ad55","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1baec4","namespace":"ai-tenant-e2e-shared-a-f0ad55","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f0ad55/rate-test-model-f0ad55"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e7b48c1-89ca-4299-b6f4-9ea7d1f3e4bb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41354","PortSpecifier":{"PortValue":41354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","method":"POST","path":"/ai-tenant-e2e-shared-b-11a904/rate-test-model-11a904/v1/completions","host":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:41354","PortSpecifier":{"PortValue":41354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331489,"nanos":223055793},"http":{"id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","method":"POST","headers":{":authority":"e2e-shared-b-11a904.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-11a904/rate-test-model-11a904/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VHT1cWATQsSGRILB_ui8YvbtWYxleCza58m2uVNSQK8BCD73O4zrMlWKxnJy"} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-11a904.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VHT1cWATQsSGRILB_ui8YvbtWYxleCza58m2uVNSQK8BCD73O4zrMlWKxnJy\"}"} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-11a904.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"11dccd86-f3fc-4a03-a73e-6ca710972ab7","keyName":"e2e-rate-b-1baec4","subscription":"e2e-rate-iso-b-1baec4","tenant":"e2e-shared-b-11a904","userId":"11dccd86-f3fc-4a03-a73e-6ca710972ab7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-11a904.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-11a904/rate-test-model-11a904\",\"requestedSubscription\":\"e2e-rate-iso-b-1baec4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-11a904.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-11a904/models/facebook/opt-125m","name":"rate-test-model-11a904","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1baec4","namespace":"ai-tenant-e2e-shared-b-11a904","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-11a904/rate-test-model-11a904"}} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-11a904/rate-test-model-11a904\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-11a904/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-1baec4"} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"11dccd86-f3fc-4a03-a73e-6ca710972ab7","keyName":"e2e-rate-b-1baec4","selected_subscription":"e2e-rate-iso-b-1baec4","selected_subscription_key":"ai-tenant-e2e-shared-b-11a904/e2e-rate-iso-b-1baec4@ai-tenant-e2e-shared-b-11a904/rate-test-model-11a904","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-11a904/models/facebook/opt-125m","name":"rate-test-model-11a904","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1baec4","namespace":"ai-tenant-e2e-shared-b-11a904","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-11a904/rate-test-model-11a904"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:24:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a57dabdf-c6a3-4f2c-a0ec-71d9f6513e50","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/699cf2f1f827a776c26bc58d496c80705d6c40781f2e57e4a46329b29953f659"} {"level":"info","ts":"2026-07-29T13:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/758809c0e7689886be9e2e3f6e8bace4365dcf789029ac12680b4c5dcd8645a7"} {"level":"info","ts":"2026-07-29T13:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2155ea8ed6b3fd30e18e2d562857e5e95b8c8479b1bbcfb3c3c81371d6dcf405"} {"level":"info","ts":"2026-07-29T13:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91cd7dd774dcaf5012b473b3425d749d4eacbab8f31631ba555ed85df1e4ce55"} {"level":"info","ts":"2026-07-29T13:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bec31081ef004010df98ba331a4fed9fa67649eb97645b3a37df92389ca24ad"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b164c2d79fcca5cd882d71ac586d67cbd6ea6b1ccfadd7e6d7b28286742b7cc"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6fbd54755f81cbf294d3ecba26dd3c56ce35a8c8c869ee7d85cbaa3e3d82bcb"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cd1fb6b0e0bab9819097677911938eb0abf0350b8be07791a710af2fd23091e"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9210dd28d3825cce788d9b415e7f0fb5ad5393e3b819b94b2261871145b26fd8"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11f7f4e48a118975378e03540f5471392b8843c76d0d655c42615e67478869fa"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78ddd00079a1f9e80b88fc4b7622662c515eae7edd348fd12d6c44248ec39385"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6bd40ca6a528f85dc648b30e202f58309060b01489d04fe7b1575a01902e0d4"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/082add9cb5c80ebe3ea7fa9431bb3b74ec56bd883de4e577b585bf68f77823a9"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed520ba80d4a6688b1e77f5b7d5564e19434055ab5d6cd829207b78206cbabb0"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/483d8755741fe7ac9dba4f5f14085372ff37df155cb759e45a666e9d90095d30"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9d500468f0a82c6de5e86f10f82a8216f9b09531c016495aead1e7f8125ddf2"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4da7253207a7ce07e933834f9e4a38f3e8f94119c60948f0ac713694c989418"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f776a885d2a1371f845812b509af054a2766ca11d7701ff02b008f842c7d60d"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f06a9b62147c0a8f551e7af0f2e69dc2318c732b30f578cd3ec7d35a46d1b44a"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bca43665606c27049b2fc69fbf8f77eba6a9b10102ce8d3e10f9fb8acbe14815"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0db1d45197dcd494ebea788ca20bcef67512cfaf88d4bf607c154a74463f8d7"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/082645aedb20505cbfdb27eaa8ee266357a65abe25ee1b9378323e5eb487b756"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfec98d6702cd90159951b64c7ff69a17e3591bde749f92cd224970aa84049e0"} {"level":"info","ts":"2026-07-29T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06f558744f08df0ca6852ef85fc72abdc7e210262387bbb358f3664e2d2f93c3"} {"level":"info","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14fcccb8-8682-4702-a385-2bf8cfbb10e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50850","PortSpecifier":{"PortValue":50850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14fcccb8-8682-4702-a385-2bf8cfbb10e0","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14fcccb8-8682-4702-a385-2bf8cfbb10e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50850","PortSpecifier":{"PortValue":50850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331577,"nanos":61482284},"http":{"id":"14fcccb8-8682-4702-a385-2bf8cfbb10e0","method":"POST","headers":{":authority":"maas.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"14fcccb8-8682-4702-a385-2bf8cfbb10e0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14fcccb8-8682-4702-a385-2bf8cfbb10e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38e69f13-34ac-4763-803d-a85ab429aa41","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"]}} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14fcccb8-8682-4702-a385-2bf8cfbb10e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38e69f13-34ac-4763-803d-a85ab429aa41","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14fcccb8-8682-4702-a385-2bf8cfbb10e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14fcccb8-8682-4702-a385-2bf8cfbb10e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14fcccb8-8682-4702-a385-2bf8cfbb10e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"14fcccb8-8682-4702-a385-2bf8cfbb10e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14fcccb8-8682-4702-a385-2bf8cfbb10e0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14fcccb8-8682-4702-a385-2bf8cfbb10e0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14fcccb8-8682-4702-a385-2bf8cfbb10e0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14fcccb8-8682-4702-a385-2bf8cfbb10e0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50852","PortSpecifier":{"PortValue":50852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50852","PortSpecifier":{"PortValue":50852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331577,"nanos":114132131},"http":{"id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","method":"POST","headers":{":authority":"maas.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZLRbG6cV0cDcUcy_39WwqaK0dLYHCMsgDnc2lajBsptsIESRFwPvVvZsKRK"} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZLRbG6cV0cDcUcy_39WwqaK0dLYHCMsgDnc2lajBsptsIESRFwPvVvZsKRK\"}"} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9de21ba7-7162-4d41-9183-0eac0255dbde","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"9de21ba7-7162-4d41-9183-0eac0255dbde","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9de21ba7-7162-4d41-9183-0eac0255dbde","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:26:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70824e70-9e9d-408f-9dcd-3c16ccea225e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2025473ea718d995a85def1f3100f6587a7f166c0de7dd01883f4ef585ebb3b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2025473ea718d995a85def1f3100f6587a7f166c0de7dd01883f4ef585ebb3b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2025473ea718d995a85def1f3100f6587a7f166c0de7dd01883f4ef585ebb3b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2025473ea718d995a85def1f3100f6587a7f166c0de7dd01883f4ef585ebb3b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2025473ea718d995a85def1f3100f6587a7f166c0de7dd01883f4ef585ebb3b2"} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2025473ea718d995a85def1f3100f6587a7f166c0de7dd01883f4ef585ebb3b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2025473ea718d995a85def1f3100f6587a7f166c0de7dd01883f4ef585ebb3b2"} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2025473ea718d995a85def1f3100f6587a7f166c0de7dd01883f4ef585ebb3b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2025473ea718d995a85def1f3100f6587a7f166c0de7dd01883f4ef585ebb3b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2025473ea718d995a85def1f3100f6587a7f166c0de7dd01883f4ef585ebb3b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2025473ea718d995a85def1f3100f6587a7f166c0de7dd01883f4ef585ebb3b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2025473ea718d995a85def1f3100f6587a7f166c0de7dd01883f4ef585ebb3b2"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3"} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6"} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f"} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8"} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f"} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f"} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f"} {"level":"error","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d04d395ba7e2520e16426d40bba81fe02724462fca4cbbf21a753e5b2227e11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d04d395ba7e2520e16426d40bba81fe02724462fca4cbbf21a753e5b2227e11"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d04d395ba7e2520e16426d40bba81fe02724462fca4cbbf21a753e5b2227e11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d04d395ba7e2520e16426d40bba81fe02724462fca4cbbf21a753e5b2227e11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d04d395ba7e2520e16426d40bba81fe02724462fca4cbbf21a753e5b2227e11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d04d395ba7e2520e16426d40bba81fe02724462fca4cbbf21a753e5b2227e11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d04d395ba7e2520e16426d40bba81fe02724462fca4cbbf21a753e5b2227e11"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d04d395ba7e2520e16426d40bba81fe02724462fca4cbbf21a753e5b2227e11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d04d395ba7e2520e16426d40bba81fe02724462fca4cbbf21a753e5b2227e11"} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:26:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"} {"level":"debug","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"} {"level":"debug","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307bf4fbed13e921c20a1c88e381e01903d8f345cf07c6e8b50be81c7559bed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307bf4fbed13e921c20a1c88e381e01903d8f345cf07c6e8b50be81c7559bed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5fc8db9b2139990604011eec301e113dfb7c8d8614fd9470b904ef4a8b04157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307bf4fbed13e921c20a1c88e381e01903d8f345cf07c6e8b50be81c7559bed2"} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5fc8db9b2139990604011eec301e113dfb7c8d8614fd9470b904ef4a8b04157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"307bf4fbed13e921c20a1c88e381e01903d8f345cf07c6e8b50be81c7559bed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["307bf4fbed13e921c20a1c88e381e01903d8f345cf07c6e8b50be81c7559bed2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5fc8db9b2139990604011eec301e113dfb7c8d8614fd9470b904ef4a8b04157"} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307bf4fbed13e921c20a1c88e381e01903d8f345cf07c6e8b50be81c7559bed2"} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"307bf4fbed13e921c20a1c88e381e01903d8f345cf07c6e8b50be81c7559bed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6b995b0ef16e8ddecba711ab19fde8ede734226b8e45afd5222236f308a41f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6b995b0ef16e8ddecba711ab19fde8ede734226b8e45afd5222236f308a41f8"} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5fc8db9b2139990604011eec301e113dfb7c8d8614fd9470b904ef4a8b04157"} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c729806ac7edc5090f1a5bf56e76e422708900ac6d1121b7292b8830b46aaa24"} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6b995b0ef16e8ddecba711ab19fde8ede734226b8e45afd5222236f308a41f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5fc8db9b2139990604011eec301e113dfb7c8d8614fd9470b904ef4a8b04157","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5fc8db9b2139990604011eec301e113dfb7c8d8614fd9470b904ef4a8b04157"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/307bf4fbed13e921c20a1c88e381e01903d8f345cf07c6e8b50be81c7559bed2"} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c89eabb79363f615cb6e4733e52ebc7dc018c9c638baa540dc0d57aecf08eb00"} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5fc8db9b2139990604011eec301e113dfb7c8d8614fd9470b904ef4a8b04157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c729806ac7edc5090f1a5bf56e76e422708900ac6d1121b7292b8830b46aaa24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c729806ac7edc5090f1a5bf56e76e422708900ac6d1121b7292b8830b46aaa24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6b995b0ef16e8ddecba711ab19fde8ede734226b8e45afd5222236f308a41f8"} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5fc8db9b2139990604011eec301e113dfb7c8d8614fd9470b904ef4a8b04157"} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c729806ac7edc5090f1a5bf56e76e422708900ac6d1121b7292b8830b46aaa24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"307bf4fbed13e921c20a1c88e381e01903d8f345cf07c6e8b50be81c7559bed2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c89eabb79363f615cb6e4733e52ebc7dc018c9c638baa540dc0d57aecf08eb00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c89eabb79363f615cb6e4733e52ebc7dc018c9c638baa540dc0d57aecf08eb00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c729806ac7edc5090f1a5bf56e76e422708900ac6d1121b7292b8830b46aaa24"} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c89eabb79363f615cb6e4733e52ebc7dc018c9c638baa540dc0d57aecf08eb00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6b995b0ef16e8ddecba711ab19fde8ede734226b8e45afd5222236f308a41f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T13:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6b995b0ef16e8ddecba711ab19fde8ede734226b8e45afd5222236f308a41f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c89eabb79363f615cb6e4733e52ebc7dc018c9c638baa540dc0d57aecf08eb00"} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6b995b0ef16e8ddecba711ab19fde8ede734226b8e45afd5222236f308a41f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5fc8db9b2139990604011eec301e113dfb7c8d8614fd9470b904ef4a8b04157","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c729806ac7edc5090f1a5bf56e76e422708900ac6d1121b7292b8830b46aaa24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c89eabb79363f615cb6e4733e52ebc7dc018c9c638baa540dc0d57aecf08eb00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6b995b0ef16e8ddecba711ab19fde8ede734226b8e45afd5222236f308a41f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T13:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6b995b0ef16e8ddecba711ab19fde8ede734226b8e45afd5222236f308a41f8"} {"level":"info","ts":"2026-07-29T13:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55eda4f2-2ebe-4589-8a5f-3d02c39f4d3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56036","PortSpecifier":{"PortValue":56036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"55eda4f2-2ebe-4589-8a5f-3d02c39f4d3a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-86053a.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55eda4f2-2ebe-4589-8a5f-3d02c39f4d3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56036","PortSpecifier":{"PortValue":56036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331622,"nanos":133386262},"http":{"id":"55eda4f2-2ebe-4589-8a5f-3d02c39f4d3a","method":"POST","headers":{":authority":"e2e-ipp-a-86053a.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:27:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"55eda4f2-2ebe-4589-8a5f-3d02c39f4d3a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T13:27:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"55eda4f2-2ebe-4589-8a5f-3d02c39f4d3a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"38e69f13-34ac-4763-803d-a85ab429aa41","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"]}} {"level":"debug","ts":"2026-07-29T13:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"55eda4f2-2ebe-4589-8a5f-3d02c39f4d3a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7a7e2881072b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3f93a50f-ee82-40ab-a44c-9e7bfcf159d8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"38e69f13-34ac-4763-803d-a85ab429aa41","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9d04d395ba7e2520e16426d40bba81fe02724462fca4cbbf21a753e5b2227e11"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-86053a.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55eda4f2-2ebe-4589-8a5f-3d02c39f4d3a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55eda4f2-2ebe-4589-8a5f-3d02c39f4d3a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55eda4f2-2ebe-4589-8a5f-3d02c39f4d3a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-86053a/ipp-route-86053a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-86053a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"55eda4f2-2ebe-4589-8a5f-3d02c39f4d3a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T13:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55eda4f2-2ebe-4589-8a5f-3d02c39f4d3a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55eda4f2-2ebe-4589-8a5f-3d02c39f4d3a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T13:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55eda4f2-2ebe-4589-8a5f-3d02c39f4d3a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55eda4f2-2ebe-4589-8a5f-3d02c39f4d3a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56048","PortSpecifier":{"PortValue":56048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","method":"POST","path":"/ai-tenant-e2e-ipp-a-86053a/ipp-route-86053a/v1/chat/completions","host":"e2e-ipp-a-86053a.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56048","PortSpecifier":{"PortValue":56048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785331624,"nanos":199402510},"http":{"id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","method":"POST","headers":{":authority":"e2e-ipp-a-86053a.apps.25a30f6d-8048-43dd-af9a-7a7e2881072b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-86053a/ipp-route-86053a/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4G6i2YUygMHJ3iVn_ecxdBwvV51dvno29pAh2qar0vQAUWNRo2IjuU9DaLp4"} {"level":"debug","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-86053a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4G6i2YUygMHJ3iVn_ecxdBwvV51dvno29pAh2qar0vQAUWNRo2IjuU9DaLp4\"}"} {"level":"debug","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-86053a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"87b2ec3a-2ba5-476f-bd90-c97050172ef1","keyName":"e2e-ipp-86053a","subscription":"ipp-route-86053a-sub","tenant":"e2e-ipp-a-86053a","userId":"87b2ec3a-2ba5-476f-bd90-c97050172ef1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-86053a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-86053a/ipp-route-86053a\",\"requestedSubscription\":\"ipp-route-86053a-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-86053a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-86053a/models/facebook/opt-125m","name":"ipp-route-86053a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-86053a-sub","namespace":"ai-tenant-e2e-ipp-a-86053a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-86053a/ipp-route-86053a"}} {"level":"debug","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-86053a/ipp-route-86053a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-86053a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-86053a-sub"} {"level":"debug","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"87b2ec3a-2ba5-476f-bd90-c97050172ef1","keyName":"e2e-ipp-86053a","selected_subscription":"ipp-route-86053a-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-86053a/ipp-route-86053a-sub@ai-tenant-e2e-ipp-a-86053a/ipp-route-86053a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-86053a/models/facebook/opt-125m","name":"ipp-route-86053a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-86053a-sub","namespace":"ai-tenant-e2e-ipp-a-86053a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-86053a/ipp-route-86053a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T13:27:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f868832c-3c1a-4c5e-89b5-db5ac5c95648","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T13:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68de9f4552426e5cf213d4604aaa289ab3fc04e82105d0e77ed40bf2a1dbe8c6"} {"level":"info","ts":"2026-07-29T13:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d04d395ba7e2520e16426d40bba81fe02724462fca4cbbf21a753e5b2227e11"} {"level":"info","ts":"2026-07-29T13:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5fc8db9b2139990604011eec301e113dfb7c8d8614fd9470b904ef4a8b04157"} {"level":"info","ts":"2026-07-29T13:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/307bf4fbed13e921c20a1c88e381e01903d8f345cf07c6e8b50be81c7559bed2"} {"level":"info","ts":"2026-07-29T13:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae38d40ffc0447fe6f48cfee59aa721ee551be1d461383995a4eb09e4ffa45c8"} {"level":"info","ts":"2026-07-29T13:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c729806ac7edc5090f1a5bf56e76e422708900ac6d1121b7292b8830b46aaa24"} {"level":"info","ts":"2026-07-29T13:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2025473ea718d995a85def1f3100f6587a7f166c0de7dd01883f4ef585ebb3b2"} {"level":"info","ts":"2026-07-29T13:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16902ce40bfd13c2a992cda5380775a100045498824fdd27e6aab0de990fd57f"} {"level":"info","ts":"2026-07-29T13:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6b995b0ef16e8ddecba711ab19fde8ede734226b8e45afd5222236f308a41f8"} {"level":"info","ts":"2026-07-29T13:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c89eabb79363f615cb6e4733e52ebc7dc018c9c638baa540dc0d57aecf08eb00"} {"level":"info","ts":"2026-07-29T13:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ee6b427c6de08e53982584e99f4a8cb85d3a5acf500212eef42a5cf227a141f"} {"level":"info","ts":"2026-07-29T13:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f900199e1a30819ebe8cea6db1cef7d05fff8554a220cded961992e8ea8246b3"}