--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:49:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e7d94d106f042f3198f0d0736d33d5d430b102981113ec434d5d589d350c81a"} {"level":"info","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf"} {"level":"info","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e7d94d106f042f3198f0d0736d33d5d430b102981113ec434d5d589d350c81a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e7d94d106f042f3198f0d0736d33d5d430b102981113ec434d5d589d350c81a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e7d94d106f042f3198f0d0736d33d5d430b102981113ec434d5d589d350c81a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:49:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e7d94d106f042f3198f0d0736d33d5d430b102981113ec434d5d589d350c81a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf"} {"level":"debug","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e7d94d106f042f3198f0d0736d33d5d430b102981113ec434d5d589d350c81a"} {"level":"debug","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:49:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf"} {"level":"debug","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf"} {"level":"debug","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:49:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:49:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:49:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:49:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf"} {"level":"debug","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:49:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf"} {"level":"debug","ts":"2026-07-17T18:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:49:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:49:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:49:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf"} {"level":"info","ts":"2026-07-17T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d971d5920b7c8219b368d59d271b7ce67c31857105a080873bb2da5602afa81"} {"level":"info","ts":"2026-07-17T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b601f49bace86a6b453a3d1b30646a8c5daf0a291d00f2086623fe566b89547a"} {"level":"info","ts":"2026-07-17T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1750b0b9ccc984056180e236fcc1fe9684cf209dd35121a8e9e8902647aa113"} {"level":"info","ts":"2026-07-17T18:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d805cee36d927a4a86973e31e5c666268b32957cce7f5a7ac39c612a828bc17"} {"level":"info","ts":"2026-07-17T18:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e7d94d106f042f3198f0d0736d33d5d430b102981113ec434d5d589d350c81a"} {"level":"info","ts":"2026-07-17T18:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33aa752657452de29ccc981760a3e72cd4f223575455e3c02ebda561b05740bf"} {"level":"info","ts":"2026-07-17T18:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14dff032df166f65092fecccb6fd12ccf2228534be94b8b396162971c17c7711"} {"level":"info","ts":"2026-07-17T18:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/965bb94aaf829c265a35a49ad49b86c4a21e26a1b5146856065c737b4b8e394e"} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843"} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843"} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843"} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843"} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843"} {"level":"error","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7638f1485587def30beecb0927fa5bb881653acf3e29bed2b89cf48692186b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7638f1485587def30beecb0927fa5bb881653acf3e29bed2b89cf48692186b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7638f1485587def30beecb0927fa5bb881653acf3e29bed2b89cf48692186b3"} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7638f1485587def30beecb0927fa5bb881653acf3e29bed2b89cf48692186b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7638f1485587def30beecb0927fa5bb881653acf3e29bed2b89cf48692186b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7638f1485587def30beecb0927fa5bb881653acf3e29bed2b89cf48692186b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7638f1485587def30beecb0927fa5bb881653acf3e29bed2b89cf48692186b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843"} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7638f1485587def30beecb0927fa5bb881653acf3e29bed2b89cf48692186b3"} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7"} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7"} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcdb25139effe1ed6f860891480cd4421ac7c9ff5f4a7b968da11607b8760281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcdb25139effe1ed6f860891480cd4421ac7c9ff5f4a7b968da11607b8760281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcdb25139effe1ed6f860891480cd4421ac7c9ff5f4a7b968da11607b8760281"} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcdb25139effe1ed6f860891480cd4421ac7c9ff5f4a7b968da11607b8760281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcdb25139effe1ed6f860891480cd4421ac7c9ff5f4a7b968da11607b8760281","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcdb25139effe1ed6f860891480cd4421ac7c9ff5f4a7b968da11607b8760281"} {"level":"debug","ts":"2026-07-17T18:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcdb25139effe1ed6f860891480cd4421ac7c9ff5f4a7b968da11607b8760281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcdb25139effe1ed6f860891480cd4421ac7c9ff5f4a7b968da11607b8760281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcdb25139effe1ed6f860891480cd4421ac7c9ff5f4a7b968da11607b8760281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcdb25139effe1ed6f860891480cd4421ac7c9ff5f4a7b968da11607b8760281","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7"} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f545068eec686c6a38f2a0c0b41c4a048c2c6dcfe82e9ca721fa81c150be3ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcdb25139effe1ed6f860891480cd4421ac7c9ff5f4a7b968da11607b8760281"} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f545068eec686c6a38f2a0c0b41c4a048c2c6dcfe82e9ca721fa81c150be3ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f545068eec686c6a38f2a0c0b41c4a048c2c6dcfe82e9ca721fa81c150be3ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f545068eec686c6a38f2a0c0b41c4a048c2c6dcfe82e9ca721fa81c150be3ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f545068eec686c6a38f2a0c0b41c4a048c2c6dcfe82e9ca721fa81c150be3ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f545068eec686c6a38f2a0c0b41c4a048c2c6dcfe82e9ca721fa81c150be3ea"} {"level":"error","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0f545068eec686c6a38f2a0c0b41c4a048c2c6dcfe82e9ca721fa81c150be3ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0f545068eec686c6a38f2a0c0b41c4a048c2c6dcfe82e9ca721fa81c150be3ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f545068eec686c6a38f2a0c0b41c4a048c2c6dcfe82e9ca721fa81c150be3ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f545068eec686c6a38f2a0c0b41c4a048c2c6dcfe82e9ca721fa81c150be3ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f545068eec686c6a38f2a0c0b41c4a048c2c6dcfe82e9ca721fa81c150be3ea"} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f545068eec686c6a38f2a0c0b41c4a048c2c6dcfe82e9ca721fa81c150be3ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f545068eec686c6a38f2a0c0b41c4a048c2c6dcfe82e9ca721fa81c150be3ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f545068eec686c6a38f2a0c0b41c4a048c2c6dcfe82e9ca721fa81c150be3ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f545068eec686c6a38f2a0c0b41c4a048c2c6dcfe82e9ca721fa81c150be3ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f545068eec686c6a38f2a0c0b41c4a048c2c6dcfe82e9ca721fa81c150be3ea"} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9"} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67"} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14fed9f1eec244bb326bbe4d53a4bad308ccfcc47a3b376a3ea30791137e82c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9"} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14fed9f1eec244bb326bbe4d53a4bad308ccfcc47a3b376a3ea30791137e82c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c34afb396d1a5100e210dd3f7ace19fc424a63a151599c03a0236e4beb54f3c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67"} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c34afb396d1a5100e210dd3f7ace19fc424a63a151599c03a0236e4beb54f3c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14fed9f1eec244bb326bbe4d53a4bad308ccfcc47a3b376a3ea30791137e82c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14fed9f1eec244bb326bbe4d53a4bad308ccfcc47a3b376a3ea30791137e82c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14fed9f1eec244bb326bbe4d53a4bad308ccfcc47a3b376a3ea30791137e82c1"} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c34afb396d1a5100e210dd3f7ace19fc424a63a151599c03a0236e4beb54f3c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c34afb396d1a5100e210dd3f7ace19fc424a63a151599c03a0236e4beb54f3c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14fed9f1eec244bb326bbe4d53a4bad308ccfcc47a3b376a3ea30791137e82c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14fed9f1eec244bb326bbe4d53a4bad308ccfcc47a3b376a3ea30791137e82c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c34afb396d1a5100e210dd3f7ace19fc424a63a151599c03a0236e4beb54f3c5"} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14fed9f1eec244bb326bbe4d53a4bad308ccfcc47a3b376a3ea30791137e82c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34621bbf421905cb4618befeaf1f2b4d46f910dc1e583b998232a718b6537082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34621bbf421905cb4618befeaf1f2b4d46f910dc1e583b998232a718b6537082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c34afb396d1a5100e210dd3f7ace19fc424a63a151599c03a0236e4beb54f3c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c34afb396d1a5100e210dd3f7ace19fc424a63a151599c03a0236e4beb54f3c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c34afb396d1a5100e210dd3f7ace19fc424a63a151599c03a0236e4beb54f3c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14fed9f1eec244bb326bbe4d53a4bad308ccfcc47a3b376a3ea30791137e82c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34621bbf421905cb4618befeaf1f2b4d46f910dc1e583b998232a718b6537082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c34afb396d1a5100e210dd3f7ace19fc424a63a151599c03a0236e4beb54f3c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67"} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34621bbf421905cb4618befeaf1f2b4d46f910dc1e583b998232a718b6537082","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14fed9f1eec244bb326bbe4d53a4bad308ccfcc47a3b376a3ea30791137e82c1"} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34621bbf421905cb4618befeaf1f2b4d46f910dc1e583b998232a718b6537082"} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34621bbf421905cb4618befeaf1f2b4d46f910dc1e583b998232a718b6537082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34621bbf421905cb4618befeaf1f2b4d46f910dc1e583b998232a718b6537082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34621bbf421905cb4618befeaf1f2b4d46f910dc1e583b998232a718b6537082","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34621bbf421905cb4618befeaf1f2b4d46f910dc1e583b998232a718b6537082","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c34afb396d1a5100e210dd3f7ace19fc424a63a151599c03a0236e4beb54f3c5"} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67"} {"level":"info","ts":"2026-07-17T18:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34621bbf421905cb4618befeaf1f2b4d46f910dc1e583b998232a718b6537082"} {"level":"debug","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0"} {"level":"info","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0"} {"level":"debug","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0"} {"level":"debug","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0"} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0"} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0"} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b98841ab756bc9e2e7476b4a4ea27af437d842633dd3750f95315bfd648a88df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b98841ab756bc9e2e7476b4a4ea27af437d842633dd3750f95315bfd648a88df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b98841ab756bc9e2e7476b4a4ea27af437d842633dd3750f95315bfd648a88df"} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b98841ab756bc9e2e7476b4a4ea27af437d842633dd3750f95315bfd648a88df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b98841ab756bc9e2e7476b4a4ea27af437d842633dd3750f95315bfd648a88df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b98841ab756bc9e2e7476b4a4ea27af437d842633dd3750f95315bfd648a88df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b98841ab756bc9e2e7476b4a4ea27af437d842633dd3750f95315bfd648a88df"} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b98841ab756bc9e2e7476b4a4ea27af437d842633dd3750f95315bfd648a88df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b98841ab756bc9e2e7476b4a4ea27af437d842633dd3750f95315bfd648a88df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b98841ab756bc9e2e7476b4a4ea27af437d842633dd3750f95315bfd648a88df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b98841ab756bc9e2e7476b4a4ea27af437d842633dd3750f95315bfd648a88df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b98841ab756bc9e2e7476b4a4ea27af437d842633dd3750f95315bfd648a88df"} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e"} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e"} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42"} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e"} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42"} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e"} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42"} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e"} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42"} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e"} {"level":"info","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e"} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3ce79f9b473072e372d7e834e4c42cd578e03104f984ad34473233b35aee41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42"} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3ce79f9b473072e372d7e834e4c42cd578e03104f984ad34473233b35aee41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3ce79f9b473072e372d7e834e4c42cd578e03104f984ad34473233b35aee41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3ce79f9b473072e372d7e834e4c42cd578e03104f984ad34473233b35aee41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3ce79f9b473072e372d7e834e4c42cd578e03104f984ad34473233b35aee41","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3ce79f9b473072e372d7e834e4c42cd578e03104f984ad34473233b35aee41"} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3ce79f9b473072e372d7e834e4c42cd578e03104f984ad34473233b35aee41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef3ce79f9b473072e372d7e834e4c42cd578e03104f984ad34473233b35aee41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3ce79f9b473072e372d7e834e4c42cd578e03104f984ad34473233b35aee41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3ce79f9b473072e372d7e834e4c42cd578e03104f984ad34473233b35aee41","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e"} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3ce79f9b473072e372d7e834e4c42cd578e03104f984ad34473233b35aee41"} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae5974aabf20830a2747f83e4a4eaeba514bf434eaa2786efb05da89b40e440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821"} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae5974aabf20830a2747f83e4a4eaeba514bf434eaa2786efb05da89b40e440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae5974aabf20830a2747f83e4a4eaeba514bf434eaa2786efb05da89b40e440"} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae5974aabf20830a2747f83e4a4eaeba514bf434eaa2786efb05da89b40e440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ae5974aabf20830a2747f83e4a4eaeba514bf434eaa2786efb05da89b40e440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae5974aabf20830a2747f83e4a4eaeba514bf434eaa2786efb05da89b40e440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821"} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae5974aabf20830a2747f83e4a4eaeba514bf434eaa2786efb05da89b40e440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae5974aabf20830a2747f83e4a4eaeba514bf434eaa2786efb05da89b40e440"} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae5974aabf20830a2747f83e4a4eaeba514bf434eaa2786efb05da89b40e440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bb742d4e0530d55ab394166b6c71910f95a7fca4882db7ccffea99b2dc25701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821"} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bb742d4e0530d55ab394166b6c71910f95a7fca4882db7ccffea99b2dc25701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ae5974aabf20830a2747f83e4a4eaeba514bf434eaa2786efb05da89b40e440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ae5974aabf20830a2747f83e4a4eaeba514bf434eaa2786efb05da89b40e440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ae5974aabf20830a2747f83e4a4eaeba514bf434eaa2786efb05da89b40e440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a4e56e60832770a48a866c64196361b428288189aa43db5ac257cbfa333acd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bb742d4e0530d55ab394166b6c71910f95a7fca4882db7ccffea99b2dc25701"} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a4e56e60832770a48a866c64196361b428288189aa43db5ac257cbfa333acd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bb742d4e0530d55ab394166b6c71910f95a7fca4882db7ccffea99b2dc25701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bb742d4e0530d55ab394166b6c71910f95a7fca4882db7ccffea99b2dc25701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ae5974aabf20830a2747f83e4a4eaeba514bf434eaa2786efb05da89b40e440"} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bb742d4e0530d55ab394166b6c71910f95a7fca4882db7ccffea99b2dc25701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0471feaebb32977620814eb039f8422895ab8181ba63e6a490e860f53330708c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a4e56e60832770a48a866c64196361b428288189aa43db5ac257cbfa333acd"} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0471feaebb32977620814eb039f8422895ab8181ba63e6a490e860f53330708c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ae5974aabf20830a2747f83e4a4eaeba514bf434eaa2786efb05da89b40e440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5a4e56e60832770a48a866c64196361b428288189aa43db5ac257cbfa333acd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5a4e56e60832770a48a866c64196361b428288189aa43db5ac257cbfa333acd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0471feaebb32977620814eb039f8422895ab8181ba63e6a490e860f53330708c"} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5a4e56e60832770a48a866c64196361b428288189aa43db5ac257cbfa333acd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bb742d4e0530d55ab394166b6c71910f95a7fca4882db7ccffea99b2dc25701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bb742d4e0530d55ab394166b6c71910f95a7fca4882db7ccffea99b2dc25701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0471feaebb32977620814eb039f8422895ab8181ba63e6a490e860f53330708c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0471feaebb32977620814eb039f8422895ab8181ba63e6a490e860f53330708c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bb742d4e0530d55ab394166b6c71910f95a7fca4882db7ccffea99b2dc25701"} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0471feaebb32977620814eb039f8422895ab8181ba63e6a490e860f53330708c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5a4e56e60832770a48a866c64196361b428288189aa43db5ac257cbfa333acd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bb742d4e0530d55ab394166b6c71910f95a7fca4882db7ccffea99b2dc25701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bb742d4e0530d55ab394166b6c71910f95a7fca4882db7ccffea99b2dc25701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821"} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bb742d4e0530d55ab394166b6c71910f95a7fca4882db7ccffea99b2dc25701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0471feaebb32977620814eb039f8422895ab8181ba63e6a490e860f53330708c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0471feaebb32977620814eb039f8422895ab8181ba63e6a490e860f53330708c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bb742d4e0530d55ab394166b6c71910f95a7fca4882db7ccffea99b2dc25701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0471feaebb32977620814eb039f8422895ab8181ba63e6a490e860f53330708c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0471feaebb32977620814eb039f8422895ab8181ba63e6a490e860f53330708c"} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0471feaebb32977620814eb039f8422895ab8181ba63e6a490e860f53330708c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:51:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0471feaebb32977620814eb039f8422895ab8181ba63e6a490e860f53330708c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0471feaebb32977620814eb039f8422895ab8181ba63e6a490e860f53330708c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0471feaebb32977620814eb039f8422895ab8181ba63e6a490e860f53330708c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5a4e56e60832770a48a866c64196361b428288189aa43db5ac257cbfa333acd"} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bb742d4e0530d55ab394166b6c71910f95a7fca4882db7ccffea99b2dc25701"} {"level":"info","ts":"2026-07-17T18:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0471feaebb32977620814eb039f8422895ab8181ba63e6a490e860f53330708c"} {"level":"info","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4a731b0-8b3c-4e24-a69b-6d1d4e425064","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56940","PortSpecifier":{"PortValue":56940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4a731b0-8b3c-4e24-a69b-6d1d4e425064","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4a731b0-8b3c-4e24-a69b-6d1d4e425064","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56940","PortSpecifier":{"PortValue":56940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314315,"nanos":780893418},"http":{"id":"f4a731b0-8b3c-4e24-a69b-6d1d4e425064","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4a731b0-8b3c-4e24-a69b-6d1d4e425064","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4a731b0-8b3c-4e24-a69b-6d1d4e425064","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4a731b0-8b3c-4e24-a69b-6d1d4e425064","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4a731b0-8b3c-4e24-a69b-6d1d4e425064","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4a731b0-8b3c-4e24-a69b-6d1d4e425064","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4a731b0-8b3c-4e24-a69b-6d1d4e425064","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/auth-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4a731b0-8b3c-4e24-a69b-6d1d4e425064","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4a731b0-8b3c-4e24-a69b-6d1d4e425064","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4a731b0-8b3c-4e24-a69b-6d1d4e425064","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4a731b0-8b3c-4e24-a69b-6d1d4e425064","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4a731b0-8b3c-4e24-a69b-6d1d4e425064","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ce32adb-88ea-4a01-8103-79197e6be573","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54258","PortSpecifier":{"PortValue":54258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ce32adb-88ea-4a01-8103-79197e6be573","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ce32adb-88ea-4a01-8103-79197e6be573","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54258","PortSpecifier":{"PortValue":54258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314315,"nanos":842368681},"http":{"id":"7ce32adb-88ea-4a01-8103-79197e6be573","method":"POST","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7ce32adb-88ea-4a01-8103-79197e6be573","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ce32adb-88ea-4a01-8103-79197e6be573","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ce32adb-88ea-4a01-8103-79197e6be573","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ce32adb-88ea-4a01-8103-79197e6be573","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ce32adb-88ea-4a01-8103-79197e6be573","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ce32adb-88ea-4a01-8103-79197e6be573","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/auth-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ce32adb-88ea-4a01-8103-79197e6be573","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ce32adb-88ea-4a01-8103-79197e6be573","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ce32adb-88ea-4a01-8103-79197e6be573","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ce32adb-88ea-4a01-8103-79197e6be573","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ce32adb-88ea-4a01-8103-79197e6be573","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86b18687-bdaa-4e80-9786-8b93632b1055","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56946","PortSpecifier":{"PortValue":56946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86b18687-bdaa-4e80-9786-8b93632b1055","method":"GET","path":"/maas-api/v1/api-keys/37158616-b2b7-427a-ab7d-61398fc22ce2","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86b18687-bdaa-4e80-9786-8b93632b1055","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56946","PortSpecifier":{"PortValue":56946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314315,"nanos":902335884},"http":{"id":"86b18687-bdaa-4e80-9786-8b93632b1055","method":"GET","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/37158616-b2b7-427a-ab7d-61398fc22ce2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86b18687-bdaa-4e80-9786-8b93632b1055","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86b18687-bdaa-4e80-9786-8b93632b1055","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86b18687-bdaa-4e80-9786-8b93632b1055","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/37158616-b2b7-427a-ab7d-61398fc22ce2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86b18687-bdaa-4e80-9786-8b93632b1055","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86b18687-bdaa-4e80-9786-8b93632b1055","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86b18687-bdaa-4e80-9786-8b93632b1055","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/auth-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86b18687-bdaa-4e80-9786-8b93632b1055","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86b18687-bdaa-4e80-9786-8b93632b1055","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86b18687-bdaa-4e80-9786-8b93632b1055","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86b18687-bdaa-4e80-9786-8b93632b1055","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86b18687-bdaa-4e80-9786-8b93632b1055","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c3dfa02-0e8d-4e9b-80bc-b2a61ef519b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54268","PortSpecifier":{"PortValue":54268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c3dfa02-0e8d-4e9b-80bc-b2a61ef519b7","method":"GET","path":"/maas-api/v1/api-keys/c5e2c6ad-9d02-43c2-85ba-8052369a8889","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c3dfa02-0e8d-4e9b-80bc-b2a61ef519b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54268","PortSpecifier":{"PortValue":54268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314315,"nanos":932608534},"http":{"id":"3c3dfa02-0e8d-4e9b-80bc-b2a61ef519b7","method":"GET","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c5e2c6ad-9d02-43c2-85ba-8052369a8889",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3c3dfa02-0e8d-4e9b-80bc-b2a61ef519b7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c3dfa02-0e8d-4e9b-80bc-b2a61ef519b7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c3dfa02-0e8d-4e9b-80bc-b2a61ef519b7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c5e2c6ad-9d02-43c2-85ba-8052369a8889",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c3dfa02-0e8d-4e9b-80bc-b2a61ef519b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c3dfa02-0e8d-4e9b-80bc-b2a61ef519b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c3dfa02-0e8d-4e9b-80bc-b2a61ef519b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/auth-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3c3dfa02-0e8d-4e9b-80bc-b2a61ef519b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c3dfa02-0e8d-4e9b-80bc-b2a61ef519b7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c3dfa02-0e8d-4e9b-80bc-b2a61ef519b7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c3dfa02-0e8d-4e9b-80bc-b2a61ef519b7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:51:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c3dfa02-0e8d-4e9b-80bc-b2a61ef519b7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d66b2d1-18f1-4ec6-a42f-aa37910c8bb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36850","PortSpecifier":{"PortValue":36850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d66b2d1-18f1-4ec6-a42f-aa37910c8bb9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d66b2d1-18f1-4ec6-a42f-aa37910c8bb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36850","PortSpecifier":{"PortValue":36850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314335,"nanos":209859677},"http":{"id":"1d66b2d1-18f1-4ec6-a42f-aa37910c8bb9","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1d66b2d1-18f1-4ec6-a42f-aa37910c8bb9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d66b2d1-18f1-4ec6-a42f-aa37910c8bb9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d66b2d1-18f1-4ec6-a42f-aa37910c8bb9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d66b2d1-18f1-4ec6-a42f-aa37910c8bb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d66b2d1-18f1-4ec6-a42f-aa37910c8bb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d66b2d1-18f1-4ec6-a42f-aa37910c8bb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/auth-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d66b2d1-18f1-4ec6-a42f-aa37910c8bb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d66b2d1-18f1-4ec6-a42f-aa37910c8bb9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d66b2d1-18f1-4ec6-a42f-aa37910c8bb9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d66b2d1-18f1-4ec6-a42f-aa37910c8bb9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d66b2d1-18f1-4ec6-a42f-aa37910c8bb9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a66c2e55-10b6-4290-affe-b2ea3b0391a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45290","PortSpecifier":{"PortValue":45290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a66c2e55-10b6-4290-affe-b2ea3b0391a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a66c2e55-10b6-4290-affe-b2ea3b0391a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45290","PortSpecifier":{"PortValue":45290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314335,"nanos":246114625},"http":{"id":"a66c2e55-10b6-4290-affe-b2ea3b0391a8","method":"POST","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a66c2e55-10b6-4290-affe-b2ea3b0391a8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a66c2e55-10b6-4290-affe-b2ea3b0391a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a66c2e55-10b6-4290-affe-b2ea3b0391a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a66c2e55-10b6-4290-affe-b2ea3b0391a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a66c2e55-10b6-4290-affe-b2ea3b0391a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a66c2e55-10b6-4290-affe-b2ea3b0391a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/auth-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a66c2e55-10b6-4290-affe-b2ea3b0391a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a66c2e55-10b6-4290-affe-b2ea3b0391a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a66c2e55-10b6-4290-affe-b2ea3b0391a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a66c2e55-10b6-4290-affe-b2ea3b0391a8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a66c2e55-10b6-4290-affe-b2ea3b0391a8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7260d54c-b390-4d7e-a146-5e3fdaa6f369","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36856","PortSpecifier":{"PortValue":36856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7260d54c-b390-4d7e-a146-5e3fdaa6f369","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7260d54c-b390-4d7e-a146-5e3fdaa6f369","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36856","PortSpecifier":{"PortValue":36856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314335,"nanos":281692865},"http":{"id":"7260d54c-b390-4d7e-a146-5e3fdaa6f369","method":"GET","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7260d54c-b390-4d7e-a146-5e3fdaa6f369","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TuZhKxTvgg8vgQEL_in4Ghb0TdBGxCzzzPLOKGIMPZY1zAEHlAD9eHi3iAgF"} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7260d54c-b390-4d7e-a146-5e3fdaa6f369","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TuZhKxTvgg8vgQEL_in4Ghb0TdBGxCzzzPLOKGIMPZY1zAEHlAD9eHi3iAgF\"}"} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7260d54c-b390-4d7e-a146-5e3fdaa6f369","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d90edc9b-190b-474c-8306-9fd758e2828c","keyName":"e2e-auth-iso-a-99724d","subscription":"e2e-auth-iso-8a6021","tenant":"e2e-shared-a-4280a6","userId":"d90edc9b-190b-474c-8306-9fd758e2828c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7260d54c-b390-4d7e-a146-5e3fdaa6f369","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7260d54c-b390-4d7e-a146-5e3fdaa6f369","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7260d54c-b390-4d7e-a146-5e3fdaa6f369","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7260d54c-b390-4d7e-a146-5e3fdaa6f369","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/auth-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7260d54c-b390-4d7e-a146-5e3fdaa6f369","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7260d54c-b390-4d7e-a146-5e3fdaa6f369","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7260d54c-b390-4d7e-a146-5e3fdaa6f369","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7260d54c-b390-4d7e-a146-5e3fdaa6f369","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8a6021"} {"level":"info","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7260d54c-b390-4d7e-a146-5e3fdaa6f369","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:52:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7260d54c-b390-4d7e-a146-5e3fdaa6f369","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00458be2-c937-4e3c-b6ed-95c29f4709d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47568","PortSpecifier":{"PortValue":47568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00458be2-c937-4e3c-b6ed-95c29f4709d4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00458be2-c937-4e3c-b6ed-95c29f4709d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47568","PortSpecifier":{"PortValue":47568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314352,"nanos":409360303},"http":{"id":"00458be2-c937-4e3c-b6ed-95c29f4709d4","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"00458be2-c937-4e3c-b6ed-95c29f4709d4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00458be2-c937-4e3c-b6ed-95c29f4709d4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00458be2-c937-4e3c-b6ed-95c29f4709d4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00458be2-c937-4e3c-b6ed-95c29f4709d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00458be2-c937-4e3c-b6ed-95c29f4709d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00458be2-c937-4e3c-b6ed-95c29f4709d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/auth-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"00458be2-c937-4e3c-b6ed-95c29f4709d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00458be2-c937-4e3c-b6ed-95c29f4709d4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00458be2-c937-4e3c-b6ed-95c29f4709d4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00458be2-c937-4e3c-b6ed-95c29f4709d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00458be2-c937-4e3c-b6ed-95c29f4709d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2a742b0-b145-435f-9574-f752c1db4296","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33688","PortSpecifier":{"PortValue":33688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2a742b0-b145-435f-9574-f752c1db4296","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2a742b0-b145-435f-9574-f752c1db4296","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33688","PortSpecifier":{"PortValue":33688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314352,"nanos":450658996},"http":{"id":"b2a742b0-b145-435f-9574-f752c1db4296","method":"POST","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b2a742b0-b145-435f-9574-f752c1db4296","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2a742b0-b145-435f-9574-f752c1db4296","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2a742b0-b145-435f-9574-f752c1db4296","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2a742b0-b145-435f-9574-f752c1db4296","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2a742b0-b145-435f-9574-f752c1db4296","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2a742b0-b145-435f-9574-f752c1db4296","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/auth-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2a742b0-b145-435f-9574-f752c1db4296","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2a742b0-b145-435f-9574-f752c1db4296","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2a742b0-b145-435f-9574-f752c1db4296","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2a742b0-b145-435f-9574-f752c1db4296","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2a742b0-b145-435f-9574-f752c1db4296","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cb86ab4-32e0-4965-b7d0-7571d1e77e52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33704","PortSpecifier":{"PortValue":33704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7cb86ab4-32e0-4965-b7d0-7571d1e77e52","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cb86ab4-32e0-4965-b7d0-7571d1e77e52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33704","PortSpecifier":{"PortValue":33704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314352,"nanos":492280564},"http":{"id":"7cb86ab4-32e0-4965-b7d0-7571d1e77e52","method":"GET","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7cb86ab4-32e0-4965-b7d0-7571d1e77e52","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WmxWPcPTSsd3UGes_r81XniklJ0y6PkTtgT1zgoupbNY0s0HVgzc69wVH9Sy"} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7cb86ab4-32e0-4965-b7d0-7571d1e77e52","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1671a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WmxWPcPTSsd3UGes_r81XniklJ0y6PkTtgT1zgoupbNY0s0HVgzc69wVH9Sy\"}"} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7cb86ab4-32e0-4965-b7d0-7571d1e77e52","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1671a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7cb86ab4-32e0-4965-b7d0-7571d1e77e52","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cb86ab4-32e0-4965-b7d0-7571d1e77e52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"7cb86ab4-32e0-4965-b7d0-7571d1e77e52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cb86ab4-32e0-4965-b7d0-7571d1e77e52","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-17T18:52:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cb86ab4-32e0-4965-b7d0-7571d1e77e52","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32dc6d46-8262-4009-849c-10e70fd63203","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34416","PortSpecifier":{"PortValue":34416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32dc6d46-8262-4009-849c-10e70fd63203","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32dc6d46-8262-4009-849c-10e70fd63203","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34416","PortSpecifier":{"PortValue":34416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314367,"nanos":469394594},"http":{"id":"32dc6d46-8262-4009-849c-10e70fd63203","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"32dc6d46-8262-4009-849c-10e70fd63203","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32dc6d46-8262-4009-849c-10e70fd63203","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32dc6d46-8262-4009-849c-10e70fd63203","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32dc6d46-8262-4009-849c-10e70fd63203","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32dc6d46-8262-4009-849c-10e70fd63203","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32dc6d46-8262-4009-849c-10e70fd63203","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/auth-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32dc6d46-8262-4009-849c-10e70fd63203","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32dc6d46-8262-4009-849c-10e70fd63203","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32dc6d46-8262-4009-849c-10e70fd63203","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32dc6d46-8262-4009-849c-10e70fd63203","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32dc6d46-8262-4009-849c-10e70fd63203","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24062676-1bf7-47dd-8c67-0bdaeb62caab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38652","PortSpecifier":{"PortValue":38652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24062676-1bf7-47dd-8c67-0bdaeb62caab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24062676-1bf7-47dd-8c67-0bdaeb62caab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38652","PortSpecifier":{"PortValue":38652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314367,"nanos":509126893},"http":{"id":"24062676-1bf7-47dd-8c67-0bdaeb62caab","method":"POST","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"24062676-1bf7-47dd-8c67-0bdaeb62caab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24062676-1bf7-47dd-8c67-0bdaeb62caab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24062676-1bf7-47dd-8c67-0bdaeb62caab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24062676-1bf7-47dd-8c67-0bdaeb62caab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24062676-1bf7-47dd-8c67-0bdaeb62caab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24062676-1bf7-47dd-8c67-0bdaeb62caab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/auth-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"24062676-1bf7-47dd-8c67-0bdaeb62caab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24062676-1bf7-47dd-8c67-0bdaeb62caab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24062676-1bf7-47dd-8c67-0bdaeb62caab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24062676-1bf7-47dd-8c67-0bdaeb62caab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24062676-1bf7-47dd-8c67-0bdaeb62caab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf8b1e91-67c1-4510-ac9c-2b7bea3fe42b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34426","PortSpecifier":{"PortValue":34426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf8b1e91-67c1-4510-ac9c-2b7bea3fe42b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf8b1e91-67c1-4510-ac9c-2b7bea3fe42b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34426","PortSpecifier":{"PortValue":34426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314367,"nanos":542315006},"http":{"id":"bf8b1e91-67c1-4510-ac9c-2b7bea3fe42b","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf8b1e91-67c1-4510-ac9c-2b7bea3fe42b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf8b1e91-67c1-4510-ac9c-2b7bea3fe42b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf8b1e91-67c1-4510-ac9c-2b7bea3fe42b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf8b1e91-67c1-4510-ac9c-2b7bea3fe42b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf8b1e91-67c1-4510-ac9c-2b7bea3fe42b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf8b1e91-67c1-4510-ac9c-2b7bea3fe42b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/auth-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf8b1e91-67c1-4510-ac9c-2b7bea3fe42b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf8b1e91-67c1-4510-ac9c-2b7bea3fe42b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf8b1e91-67c1-4510-ac9c-2b7bea3fe42b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf8b1e91-67c1-4510-ac9c-2b7bea3fe42b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf8b1e91-67c1-4510-ac9c-2b7bea3fe42b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6689af25-9db3-4daf-8b46-3104c2421e2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38666","PortSpecifier":{"PortValue":38666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6689af25-9db3-4daf-8b46-3104c2421e2f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6689af25-9db3-4daf-8b46-3104c2421e2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38666","PortSpecifier":{"PortValue":38666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314367,"nanos":574925843},"http":{"id":"6689af25-9db3-4daf-8b46-3104c2421e2f","method":"POST","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6689af25-9db3-4daf-8b46-3104c2421e2f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6689af25-9db3-4daf-8b46-3104c2421e2f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6689af25-9db3-4daf-8b46-3104c2421e2f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6689af25-9db3-4daf-8b46-3104c2421e2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6689af25-9db3-4daf-8b46-3104c2421e2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6689af25-9db3-4daf-8b46-3104c2421e2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/auth-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6689af25-9db3-4daf-8b46-3104c2421e2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6689af25-9db3-4daf-8b46-3104c2421e2f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6689af25-9db3-4daf-8b46-3104c2421e2f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6689af25-9db3-4daf-8b46-3104c2421e2f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:52:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6689af25-9db3-4daf-8b46-3104c2421e2f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"361909d8-f0e3-424c-8496-02041794dd14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46888","PortSpecifier":{"PortValue":46888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"361909d8-f0e3-424c-8496-02041794dd14","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"361909d8-f0e3-424c-8496-02041794dd14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46888","PortSpecifier":{"PortValue":46888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314386,"nanos":736904964},"http":{"id":"361909d8-f0e3-424c-8496-02041794dd14","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"361909d8-f0e3-424c-8496-02041794dd14","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"361909d8-f0e3-424c-8496-02041794dd14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"361909d8-f0e3-424c-8496-02041794dd14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"361909d8-f0e3-424c-8496-02041794dd14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"361909d8-f0e3-424c-8496-02041794dd14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"361909d8-f0e3-424c-8496-02041794dd14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/auth-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"361909d8-f0e3-424c-8496-02041794dd14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"361909d8-f0e3-424c-8496-02041794dd14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"361909d8-f0e3-424c-8496-02041794dd14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"361909d8-f0e3-424c-8496-02041794dd14","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"361909d8-f0e3-424c-8496-02041794dd14","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06dbbeb6-e34a-4853-9c21-a7dfb2bf3044","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45576","PortSpecifier":{"PortValue":45576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06dbbeb6-e34a-4853-9c21-a7dfb2bf3044","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06dbbeb6-e34a-4853-9c21-a7dfb2bf3044","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45576","PortSpecifier":{"PortValue":45576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314386,"nanos":771058904},"http":{"id":"06dbbeb6-e34a-4853-9c21-a7dfb2bf3044","method":"POST","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06dbbeb6-e34a-4853-9c21-a7dfb2bf3044","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06dbbeb6-e34a-4853-9c21-a7dfb2bf3044","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06dbbeb6-e34a-4853-9c21-a7dfb2bf3044","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06dbbeb6-e34a-4853-9c21-a7dfb2bf3044","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06dbbeb6-e34a-4853-9c21-a7dfb2bf3044","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06dbbeb6-e34a-4853-9c21-a7dfb2bf3044","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/auth-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06dbbeb6-e34a-4853-9c21-a7dfb2bf3044","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06dbbeb6-e34a-4853-9c21-a7dfb2bf3044","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06dbbeb6-e34a-4853-9c21-a7dfb2bf3044","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06dbbeb6-e34a-4853-9c21-a7dfb2bf3044","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06dbbeb6-e34a-4853-9c21-a7dfb2bf3044","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4498eb4b-80f2-4923-9344-873c6848ccc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45590","PortSpecifier":{"PortValue":45590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4498eb4b-80f2-4923-9344-873c6848ccc4","method":"GET","path":"/maas-api/v1/api-keys/dc8aa33b-7b3e-4f55-a5ea-650fe2116dd5","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4498eb4b-80f2-4923-9344-873c6848ccc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45590","PortSpecifier":{"PortValue":45590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314386,"nanos":803962136},"http":{"id":"4498eb4b-80f2-4923-9344-873c6848ccc4","method":"GET","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dc8aa33b-7b3e-4f55-a5ea-650fe2116dd5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4498eb4b-80f2-4923-9344-873c6848ccc4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4498eb4b-80f2-4923-9344-873c6848ccc4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4498eb4b-80f2-4923-9344-873c6848ccc4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dc8aa33b-7b3e-4f55-a5ea-650fe2116dd5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4498eb4b-80f2-4923-9344-873c6848ccc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4498eb4b-80f2-4923-9344-873c6848ccc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4498eb4b-80f2-4923-9344-873c6848ccc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/auth-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4498eb4b-80f2-4923-9344-873c6848ccc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4498eb4b-80f2-4923-9344-873c6848ccc4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4498eb4b-80f2-4923-9344-873c6848ccc4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4498eb4b-80f2-4923-9344-873c6848ccc4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4498eb4b-80f2-4923-9344-873c6848ccc4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2c2c177-5d8a-47e6-bb16-b87aa83e1522","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46890","PortSpecifier":{"PortValue":46890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2c2c177-5d8a-47e6-bb16-b87aa83e1522","method":"GET","path":"/maas-api/v1/api-keys/dc8aa33b-7b3e-4f55-a5ea-650fe2116dd5","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2c2c177-5d8a-47e6-bb16-b87aa83e1522","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46890","PortSpecifier":{"PortValue":46890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314386,"nanos":837305014},"http":{"id":"c2c2c177-5d8a-47e6-bb16-b87aa83e1522","method":"GET","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dc8aa33b-7b3e-4f55-a5ea-650fe2116dd5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2c2c177-5d8a-47e6-bb16-b87aa83e1522","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2c2c177-5d8a-47e6-bb16-b87aa83e1522","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2c2c177-5d8a-47e6-bb16-b87aa83e1522","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dc8aa33b-7b3e-4f55-a5ea-650fe2116dd5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2c2c177-5d8a-47e6-bb16-b87aa83e1522","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2c2c177-5d8a-47e6-bb16-b87aa83e1522","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2c2c177-5d8a-47e6-bb16-b87aa83e1522","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/auth-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2c2c177-5d8a-47e6-bb16-b87aa83e1522","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2c2c177-5d8a-47e6-bb16-b87aa83e1522","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2c2c177-5d8a-47e6-bb16-b87aa83e1522","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2c2c177-5d8a-47e6-bb16-b87aa83e1522","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:53:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2c2c177-5d8a-47e6-bb16-b87aa83e1522","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2382ea6c-5658-4e5d-a17d-4a1289e227f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50768","PortSpecifier":{"PortValue":50768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2382ea6c-5658-4e5d-a17d-4a1289e227f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2382ea6c-5658-4e5d-a17d-4a1289e227f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50768","PortSpecifier":{"PortValue":50768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314404,"nanos":953894384},"http":{"id":"2382ea6c-5658-4e5d-a17d-4a1289e227f2","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2382ea6c-5658-4e5d-a17d-4a1289e227f2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2382ea6c-5658-4e5d-a17d-4a1289e227f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2382ea6c-5658-4e5d-a17d-4a1289e227f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2382ea6c-5658-4e5d-a17d-4a1289e227f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2382ea6c-5658-4e5d-a17d-4a1289e227f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2382ea6c-5658-4e5d-a17d-4a1289e227f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/auth-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2382ea6c-5658-4e5d-a17d-4a1289e227f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2382ea6c-5658-4e5d-a17d-4a1289e227f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2382ea6c-5658-4e5d-a17d-4a1289e227f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2382ea6c-5658-4e5d-a17d-4a1289e227f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2382ea6c-5658-4e5d-a17d-4a1289e227f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8afd62a-9e8a-4366-8bdb-ee567c3b2092","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34040","PortSpecifier":{"PortValue":34040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8afd62a-9e8a-4366-8bdb-ee567c3b2092","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8afd62a-9e8a-4366-8bdb-ee567c3b2092","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34040","PortSpecifier":{"PortValue":34040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314404,"nanos":989362791},"http":{"id":"d8afd62a-9e8a-4366-8bdb-ee567c3b2092","method":"POST","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d8afd62a-9e8a-4366-8bdb-ee567c3b2092","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8afd62a-9e8a-4366-8bdb-ee567c3b2092","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8afd62a-9e8a-4366-8bdb-ee567c3b2092","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8afd62a-9e8a-4366-8bdb-ee567c3b2092","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8afd62a-9e8a-4366-8bdb-ee567c3b2092","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8afd62a-9e8a-4366-8bdb-ee567c3b2092","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/auth-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d8afd62a-9e8a-4366-8bdb-ee567c3b2092","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8afd62a-9e8a-4366-8bdb-ee567c3b2092","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8afd62a-9e8a-4366-8bdb-ee567c3b2092","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8afd62a-9e8a-4366-8bdb-ee567c3b2092","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:53:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8afd62a-9e8a-4366-8bdb-ee567c3b2092","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:53:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6811834d-2658-4767-873f-4d0f3bc518e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50778","PortSpecifier":{"PortValue":50778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6811834d-2658-4767-873f-4d0f3bc518e7","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:53:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6811834d-2658-4767-873f-4d0f3bc518e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50778","PortSpecifier":{"PortValue":50778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314405,"nanos":26399413},"http":{"id":"6811834d-2658-4767-873f-4d0f3bc518e7","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:53:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6811834d-2658-4767-873f-4d0f3bc518e7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AKPgwgQWsbhX50i0_9yQV3JrxyFCTy9A19kKWtMba2nVXWinXFfUDgj7k7jp"} {"level":"debug","ts":"2026-07-17T18:53:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6811834d-2658-4767-873f-4d0f3bc518e7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AKPgwgQWsbhX50i0_9yQV3JrxyFCTy9A19kKWtMba2nVXWinXFfUDgj7k7jp\"}"} {"level":"debug","ts":"2026-07-17T18:53:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6811834d-2658-4767-873f-4d0f3bc518e7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ef7aee9-975b-46f1-bb06-08238050b256","keyName":"e2e-auth-iso-a-c483e4","subscription":"e2e-auth-iso-ca7be6","tenant":"e2e-shared-a-4280a6","userId":"3ef7aee9-975b-46f1-bb06-08238050b256","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6811834d-2658-4767-873f-4d0f3bc518e7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6811834d-2658-4767-873f-4d0f3bc518e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6811834d-2658-4767-873f-4d0f3bc518e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6811834d-2658-4767-873f-4d0f3bc518e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/auth-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6811834d-2658-4767-873f-4d0f3bc518e7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6811834d-2658-4767-873f-4d0f3bc518e7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-ca7be6"} {"level":"debug","ts":"2026-07-17T18:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6811834d-2658-4767-873f-4d0f3bc518e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T18:53:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6811834d-2658-4767-873f-4d0f3bc518e7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:53:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6811834d-2658-4767-873f-4d0f3bc518e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:53:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6811834d-2658-4767-873f-4d0f3bc518e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c34afb396d1a5100e210dd3f7ace19fc424a63a151599c03a0236e4beb54f3c5"} {"level":"info","ts":"2026-07-17T18:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcdb25139effe1ed6f860891480cd4421ac7c9ff5f4a7b968da11607b8760281"} {"level":"info","ts":"2026-07-17T18:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5a4e56e60832770a48a866c64196361b428288189aa43db5ac257cbfa333acd"} {"level":"info","ts":"2026-07-17T18:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ae5974aabf20830a2747f83e4a4eaeba514bf434eaa2786efb05da89b40e440"} {"level":"info","ts":"2026-07-17T18:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9612394772d0a4aaebe4af4b0f1157ef9e67477abd846d556d194167a74232e"} {"level":"info","ts":"2026-07-17T18:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af7483509a2f805b3ca71758024b92695f10ac31873cedc7c00307507c6a0c67"} {"level":"info","ts":"2026-07-17T18:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bb742d4e0530d55ab394166b6c71910f95a7fca4882db7ccffea99b2dc25701"} {"level":"info","ts":"2026-07-17T18:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b98841ab756bc9e2e7476b4a4ea27af437d842633dd3750f95315bfd648a88df"} {"level":"info","ts":"2026-07-17T18:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7638f1485587def30beecb0927fa5bb881653acf3e29bed2b89cf48692186b3"} {"level":"info","ts":"2026-07-17T18:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14fed9f1eec244bb326bbe4d53a4bad308ccfcc47a3b376a3ea30791137e82c1"} {"level":"info","ts":"2026-07-17T18:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59ddf20a1167fc46f405412135f78fece83d4167ddd595ae87d8de0bd63b52a0"} {"level":"info","ts":"2026-07-17T18:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef3ce79f9b473072e372d7e834e4c42cd578e03104f984ad34473233b35aee41"} {"level":"info","ts":"2026-07-17T18:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34621bbf421905cb4618befeaf1f2b4d46f910dc1e583b998232a718b6537082"} {"level":"info","ts":"2026-07-17T18:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0471feaebb32977620814eb039f8422895ab8181ba63e6a490e860f53330708c"} {"level":"info","ts":"2026-07-17T18:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71d8fdf8d48b210f4585dee99a9da8d06cba226331bf5455eab86897f5dbe843"} {"level":"info","ts":"2026-07-17T18:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f545068eec686c6a38f2a0c0b41c4a048c2c6dcfe82e9ca721fa81c150be3ea"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e"} {"level":"error","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"} {"level":"error","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e"} {"level":"info","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e"} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e"} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e"} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e"} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:53:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"} {"level":"error","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"666d81cf40f73d756a01e3b8d5944dab7069a9fb8d0992e4efa2fed56f7eb529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"666d81cf40f73d756a01e3b8d5944dab7069a9fb8d0992e4efa2fed56f7eb529","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"666d81cf40f73d756a01e3b8d5944dab7069a9fb8d0992e4efa2fed56f7eb529","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/666d81cf40f73d756a01e3b8d5944dab7069a9fb8d0992e4efa2fed56f7eb529"} {"level":"debug","ts":"2026-07-17T18:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"666d81cf40f73d756a01e3b8d5944dab7069a9fb8d0992e4efa2fed56f7eb529","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/666d81cf40f73d756a01e3b8d5944dab7069a9fb8d0992e4efa2fed56f7eb529"} {"level":"debug","ts":"2026-07-17T18:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"666d81cf40f73d756a01e3b8d5944dab7069a9fb8d0992e4efa2fed56f7eb529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["666d81cf40f73d756a01e3b8d5944dab7069a9fb8d0992e4efa2fed56f7eb529"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"666d81cf40f73d756a01e3b8d5944dab7069a9fb8d0992e4efa2fed56f7eb529","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"666d81cf40f73d756a01e3b8d5944dab7069a9fb8d0992e4efa2fed56f7eb529","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/666d81cf40f73d756a01e3b8d5944dab7069a9fb8d0992e4efa2fed56f7eb529"} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038"} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038"} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038"} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038"} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038"} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"638f4d7a2accf9040616316431aa90a5c618bde4e2c95b262bbeb67d1e70924e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"638f4d7a2accf9040616316431aa90a5c618bde4e2c95b262bbeb67d1e70924e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"638f4d7a2accf9040616316431aa90a5c618bde4e2c95b262bbeb67d1e70924e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"638f4d7a2accf9040616316431aa90a5c618bde4e2c95b262bbeb67d1e70924e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/638f4d7a2accf9040616316431aa90a5c618bde4e2c95b262bbeb67d1e70924e"} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"638f4d7a2accf9040616316431aa90a5c618bde4e2c95b262bbeb67d1e70924e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/638f4d7a2accf9040616316431aa90a5c618bde4e2c95b262bbeb67d1e70924e"} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"638f4d7a2accf9040616316431aa90a5c618bde4e2c95b262bbeb67d1e70924e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["638f4d7a2accf9040616316431aa90a5c618bde4e2c95b262bbeb67d1e70924e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"638f4d7a2accf9040616316431aa90a5c618bde4e2c95b262bbeb67d1e70924e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"638f4d7a2accf9040616316431aa90a5c618bde4e2c95b262bbeb67d1e70924e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef"} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/638f4d7a2accf9040616316431aa90a5c618bde4e2c95b262bbeb67d1e70924e"} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef"} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20"} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20"} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20"} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c"} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c"} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c"} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20"} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c"} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613"} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c"} {"level":"info","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613"} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c"} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613"} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9"} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9"} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9"} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9"} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9"} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9"} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9"} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9"} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9"} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef"} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9"} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef"} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c"} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9"} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20"} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20"} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"} {"level":"info","ts":"2026-07-17T18:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038"} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e"} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e"} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"error","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e"} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012"} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e"} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"638f4d7a2accf9040616316431aa90a5c618bde4e2c95b262bbeb67d1e70924e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e"} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/638f4d7a2accf9040616316431aa90a5c618bde4e2c95b262bbeb67d1e70924e"} {"level":"error","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"} {"level":"error","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7"} {"level":"error","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"} {"level":"error","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:54:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"} {"level":"error","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"666d81cf40f73d756a01e3b8d5944dab7069a9fb8d0992e4efa2fed56f7eb529","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821"} {"level":"debug","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/666d81cf40f73d756a01e3b8d5944dab7069a9fb8d0992e4efa2fed56f7eb529"} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8"} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4"} {"level":"info","ts":"2026-07-17T18:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"} {"level":"info","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aa818b4-d196-44f6-8d04-da235c484be0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53406","PortSpecifier":{"PortValue":53406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1aa818b4-d196-44f6-8d04-da235c484be0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aa818b4-d196-44f6-8d04-da235c484be0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53406","PortSpecifier":{"PortValue":53406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314468,"nanos":108144051},"http":{"id":"1aa818b4-d196-44f6-8d04-da235c484be0","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1aa818b4-d196-44f6-8d04-da235c484be0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1aa818b4-d196-44f6-8d04-da235c484be0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1aa818b4-d196-44f6-8d04-da235c484be0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aa818b4-d196-44f6-8d04-da235c484be0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aa818b4-d196-44f6-8d04-da235c484be0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aa818b4-d196-44f6-8d04-da235c484be0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/sub-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1aa818b4-d196-44f6-8d04-da235c484be0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aa818b4-d196-44f6-8d04-da235c484be0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aa818b4-d196-44f6-8d04-da235c484be0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aa818b4-d196-44f6-8d04-da235c484be0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aa818b4-d196-44f6-8d04-da235c484be0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"255cec25-11c2-415f-8ff3-5b3477d61434","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47652","PortSpecifier":{"PortValue":47652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"255cec25-11c2-415f-8ff3-5b3477d61434","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"255cec25-11c2-415f-8ff3-5b3477d61434","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47652","PortSpecifier":{"PortValue":47652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314468,"nanos":148412328},"http":{"id":"255cec25-11c2-415f-8ff3-5b3477d61434","method":"POST","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"255cec25-11c2-415f-8ff3-5b3477d61434","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"255cec25-11c2-415f-8ff3-5b3477d61434","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"255cec25-11c2-415f-8ff3-5b3477d61434","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"255cec25-11c2-415f-8ff3-5b3477d61434","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"255cec25-11c2-415f-8ff3-5b3477d61434","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"255cec25-11c2-415f-8ff3-5b3477d61434","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/sub-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"255cec25-11c2-415f-8ff3-5b3477d61434","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"255cec25-11c2-415f-8ff3-5b3477d61434","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"255cec25-11c2-415f-8ff3-5b3477d61434","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"255cec25-11c2-415f-8ff3-5b3477d61434","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"255cec25-11c2-415f-8ff3-5b3477d61434","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b798ab98-73f6-4f3b-8851-d12d978858fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53408","PortSpecifier":{"PortValue":53408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b798ab98-73f6-4f3b-8851-d12d978858fd","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b798ab98-73f6-4f3b-8851-d12d978858fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53408","PortSpecifier":{"PortValue":53408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314468,"nanos":185633820},"http":{"id":"b798ab98-73f6-4f3b-8851-d12d978858fd","method":"GET","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b798ab98-73f6-4f3b-8851-d12d978858fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cNXuZrlSJlHeP1nw_FxtVPYhoPFEtr1aTFJGFRyurc3mG4VSgnaHFGIV9lAm"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b798ab98-73f6-4f3b-8851-d12d978858fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cNXuZrlSJlHeP1nw_FxtVPYhoPFEtr1aTFJGFRyurc3mG4VSgnaHFGIV9lAm\"}"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b798ab98-73f6-4f3b-8851-d12d978858fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b03dad79-514d-40d9-ae58-71caf04f4d9c","keyName":"e2e-sub-iso-8c07e3","subscription":"e2e-a-only-61a6cc","tenant":"e2e-shared-a-4280a6","userId":"b03dad79-514d-40d9-ae58-71caf04f4d9c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b798ab98-73f6-4f3b-8851-d12d978858fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b798ab98-73f6-4f3b-8851-d12d978858fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b798ab98-73f6-4f3b-8851-d12d978858fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b798ab98-73f6-4f3b-8851-d12d978858fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/sub-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b798ab98-73f6-4f3b-8851-d12d978858fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b798ab98-73f6-4f3b-8851-d12d978858fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b798ab98-73f6-4f3b-8851-d12d978858fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-61a6cc"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b798ab98-73f6-4f3b-8851-d12d978858fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b798ab98-73f6-4f3b-8851-d12d978858fd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b798ab98-73f6-4f3b-8851-d12d978858fd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4f16aec-b3b2-4b5a-a75f-0cfe708047e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47654","PortSpecifier":{"PortValue":47654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4f16aec-b3b2-4b5a-a75f-0cfe708047e7","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4f16aec-b3b2-4b5a-a75f-0cfe708047e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47654","PortSpecifier":{"PortValue":47654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314468,"nanos":229031352},"http":{"id":"a4f16aec-b3b2-4b5a-a75f-0cfe708047e7","method":"GET","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4f16aec-b3b2-4b5a-a75f-0cfe708047e7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ySALx9JBiFsIXz9y_DUrTKMDWgwRbzTvXckZtOsl2B3zWzqbk6yzaHtN4Wf7"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4f16aec-b3b2-4b5a-a75f-0cfe708047e7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1671a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ySALx9JBiFsIXz9y_DUrTKMDWgwRbzTvXckZtOsl2B3zWzqbk6yzaHtN4Wf7\"}"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4f16aec-b3b2-4b5a-a75f-0cfe708047e7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1671a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"05ab3111-6ca8-4d22-a522-3028f7f9d917","keyName":"e2e-sub-iso-a8ca63","subscription":"e2e-b-only-61a6cc","tenant":"e2e-shared-b-1671a0","userId":"05ab3111-6ca8-4d22-a522-3028f7f9d917","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4f16aec-b3b2-4b5a-a75f-0cfe708047e7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4f16aec-b3b2-4b5a-a75f-0cfe708047e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4f16aec-b3b2-4b5a-a75f-0cfe708047e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4f16aec-b3b2-4b5a-a75f-0cfe708047e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/sub-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a4f16aec-b3b2-4b5a-a75f-0cfe708047e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4f16aec-b3b2-4b5a-a75f-0cfe708047e7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-61a6cc"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4f16aec-b3b2-4b5a-a75f-0cfe708047e7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4f16aec-b3b2-4b5a-a75f-0cfe708047e7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4f16aec-b3b2-4b5a-a75f-0cfe708047e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4f16aec-b3b2-4b5a-a75f-0cfe708047e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fe28c08-041b-4a2a-9ed9-d54f84fea5bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54890","PortSpecifier":{"PortValue":54890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fe28c08-041b-4a2a-9ed9-d54f84fea5bf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fe28c08-041b-4a2a-9ed9-d54f84fea5bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54890","PortSpecifier":{"PortValue":54890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314485,"nanos":859999442},"http":{"id":"8fe28c08-041b-4a2a-9ed9-d54f84fea5bf","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8fe28c08-041b-4a2a-9ed9-d54f84fea5bf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fe28c08-041b-4a2a-9ed9-d54f84fea5bf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fe28c08-041b-4a2a-9ed9-d54f84fea5bf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fe28c08-041b-4a2a-9ed9-d54f84fea5bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fe28c08-041b-4a2a-9ed9-d54f84fea5bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fe28c08-041b-4a2a-9ed9-d54f84fea5bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/sub-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8fe28c08-041b-4a2a-9ed9-d54f84fea5bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fe28c08-041b-4a2a-9ed9-d54f84fea5bf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fe28c08-041b-4a2a-9ed9-d54f84fea5bf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fe28c08-041b-4a2a-9ed9-d54f84fea5bf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fe28c08-041b-4a2a-9ed9-d54f84fea5bf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2face831-87ee-4cc7-946f-02dafa6fa762","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56252","PortSpecifier":{"PortValue":56252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2face831-87ee-4cc7-946f-02dafa6fa762","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2face831-87ee-4cc7-946f-02dafa6fa762","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56252","PortSpecifier":{"PortValue":56252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314485,"nanos":907062508},"http":{"id":"2face831-87ee-4cc7-946f-02dafa6fa762","method":"POST","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2face831-87ee-4cc7-946f-02dafa6fa762","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2face831-87ee-4cc7-946f-02dafa6fa762","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2face831-87ee-4cc7-946f-02dafa6fa762","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2face831-87ee-4cc7-946f-02dafa6fa762","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2face831-87ee-4cc7-946f-02dafa6fa762","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2face831-87ee-4cc7-946f-02dafa6fa762","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/sub-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2face831-87ee-4cc7-946f-02dafa6fa762","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2face831-87ee-4cc7-946f-02dafa6fa762","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2face831-87ee-4cc7-946f-02dafa6fa762","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2face831-87ee-4cc7-946f-02dafa6fa762","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2face831-87ee-4cc7-946f-02dafa6fa762","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8fc7286-7d6b-485b-b532-8db6ade2757e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54896","PortSpecifier":{"PortValue":54896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8fc7286-7d6b-485b-b532-8db6ade2757e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8fc7286-7d6b-485b-b532-8db6ade2757e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54896","PortSpecifier":{"PortValue":54896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314485,"nanos":941649802},"http":{"id":"c8fc7286-7d6b-485b-b532-8db6ade2757e","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8fc7286-7d6b-485b-b532-8db6ade2757e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QjT3dpt8yJTeYt9H_ogVC3cFkqW2tkzsuHaYO4FfKZKPKJrHk4xxV1eqsptk"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8fc7286-7d6b-485b-b532-8db6ade2757e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QjT3dpt8yJTeYt9H_ogVC3cFkqW2tkzsuHaYO4FfKZKPKJrHk4xxV1eqsptk\"}"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8fc7286-7d6b-485b-b532-8db6ade2757e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7a7a4b9f-72cd-4876-ac0d-1409b0356eb5","keyName":"e2e-sub-iso-e80f4f","subscription":"e2e-shared-sub-eebf0c","tenant":"e2e-shared-a-4280a6","userId":"7a7a4b9f-72cd-4876-ac0d-1409b0356eb5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8fc7286-7d6b-485b-b532-8db6ade2757e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8fc7286-7d6b-485b-b532-8db6ade2757e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8fc7286-7d6b-485b-b532-8db6ade2757e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8fc7286-7d6b-485b-b532-8db6ade2757e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/sub-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8fc7286-7d6b-485b-b532-8db6ade2757e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8fc7286-7d6b-485b-b532-8db6ade2757e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8fc7286-7d6b-485b-b532-8db6ade2757e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-eebf0c"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8fc7286-7d6b-485b-b532-8db6ade2757e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8fc7286-7d6b-485b-b532-8db6ade2757e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8fc7286-7d6b-485b-b532-8db6ade2757e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0820d08-b25a-4f50-b505-1e5145c64366","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56254","PortSpecifier":{"PortValue":56254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0820d08-b25a-4f50-b505-1e5145c64366","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0820d08-b25a-4f50-b505-1e5145c64366","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56254","PortSpecifier":{"PortValue":56254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314485,"nanos":975327935},"http":{"id":"a0820d08-b25a-4f50-b505-1e5145c64366","method":"POST","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0820d08-b25a-4f50-b505-1e5145c64366","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-138jkHnRrWGbPiqk4_X3fFqCW3dl2uZKkxKAWWXCewFCX5fRwrLo2QFS3gNHq"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0820d08-b25a-4f50-b505-1e5145c64366","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1671a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-138jkHnRrWGbPiqk4_X3fFqCW3dl2uZKkxKAWWXCewFCX5fRwrLo2QFS3gNHq\"}"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0820d08-b25a-4f50-b505-1e5145c64366","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1671a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8e2224b-fb78-4480-8236-f46b6e633a8f","keyName":"e2e-sub-iso-b2d71b","subscription":"e2e-shared-sub-eebf0c","tenant":"e2e-shared-b-1671a0","userId":"f8e2224b-fb78-4480-8236-f46b6e633a8f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0820d08-b25a-4f50-b505-1e5145c64366","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0820d08-b25a-4f50-b505-1e5145c64366","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0820d08-b25a-4f50-b505-1e5145c64366","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0820d08-b25a-4f50-b505-1e5145c64366","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/sub-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0820d08-b25a-4f50-b505-1e5145c64366","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0820d08-b25a-4f50-b505-1e5145c64366","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-eebf0c"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0820d08-b25a-4f50-b505-1e5145c64366","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0820d08-b25a-4f50-b505-1e5145c64366","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0820d08-b25a-4f50-b505-1e5145c64366","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:54:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0820d08-b25a-4f50-b505-1e5145c64366","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/414aa1646c9b4f3ebdf60f6c9cc548f78b65ac7867917005f0e46512db438206"} {"level":"info","ts":"2026-07-17T18:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/638f4d7a2accf9040616316431aa90a5c618bde4e2c95b262bbeb67d1e70924e"} {"level":"info","ts":"2026-07-17T18:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9385383fc473d60fdf0313c6bf97f98d721aa32e02d20a4b1c6ebb239b3a0a59"} {"level":"info","ts":"2026-07-17T18:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd9ff8dd0772ac4e9ef2ed17a5d9c6f130613ee61a158c51c1e440f1f4a32f20"} {"level":"info","ts":"2026-07-17T18:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19f11e38bdb4e8172fac7ec40adc4edb60c57043cc8f12d7c36ae96a210274e9"} {"level":"info","ts":"2026-07-17T18:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/666d81cf40f73d756a01e3b8d5944dab7069a9fb8d0992e4efa2fed56f7eb529"} {"level":"info","ts":"2026-07-17T18:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86d304d050a74f92d57076fe45a83926e3ab4213d712d3ed78dab7c4b027b012"} {"level":"info","ts":"2026-07-17T18:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01b081b86e1f9343a085e299ca4cb98b490ec86d5b967eaf3e45fa3bf21e5038"} {"level":"info","ts":"2026-07-17T18:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83d7a2503bb290d2779c94e7e9361582eaffeb1d79750753cc373a49a678645e"} {"level":"info","ts":"2026-07-17T18:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/567fe73a931463d5bfe8b9f01dbb8560e6eee94b428667e9922f8947bdd7adef"} {"level":"info","ts":"2026-07-17T18:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/631bdcb65673ce8dad093fdd62f1355a239453c0a25c73d377e47f13e67aadd8"} {"level":"info","ts":"2026-07-17T18:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d72452fd953e52c86b5fc63eef92f02c5090b9739ac8836899fb9ce927b1613"} {"level":"info","ts":"2026-07-17T18:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a642b5dc275f7cbd26e501b2c8d8ef4fd9bcb80eb93e7467a9383b582e2fb3d4"} {"level":"info","ts":"2026-07-17T18:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78d7cbc573792077ecff2a00ac249f96f6febaf2bab23ed11f17c87e93a4395c"} {"level":"info","ts":"2026-07-17T18:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65e4ec30f373ae706d64aeeb1ccaceffab2f04357d787c969a11013f4daac94e"} {"level":"info","ts":"2026-07-17T18:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/114a012727f4daa9ca679b1cc2a278165e1102e68279c7f2f5bb496c9ea3272e"} {"level":"debug","ts":"2026-07-17T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"} {"level":"debug","ts":"2026-07-17T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"} {"level":"debug","ts":"2026-07-17T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"} {"level":"debug","ts":"2026-07-17T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"} {"level":"error","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57"} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99"} {"level":"error","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3"} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3"} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9"} {"level":"error","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5"} {"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"} {"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"} {"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"} {"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"} {"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"} {"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed"} {"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed"} {"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed"} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"} {"level":"error","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"} {"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"} {"level":"debug","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"debug","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"debug","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d"} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed"} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7"} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821"} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9"} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3"} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3"} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5"} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03"} {"level":"error","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"} {"level":"error","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"} {"level":"debug","ts":"2026-07-17T18:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T18:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T18:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T18:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"} {"level":"info","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37438","PortSpecifier":{"PortValue":37438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37438","PortSpecifier":{"PortValue":37438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314554,"nanos":667368434},"http":{"id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59860","PortSpecifier":{"PortValue":59860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59860","PortSpecifier":{"PortValue":59860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314554,"nanos":707633124},"http":{"id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","method":"POST","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/rate-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37442","PortSpecifier":{"PortValue":37442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0933774-b461-4ec4-abb6-8eb795589e92","method":"POST","path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37442","PortSpecifier":{"PortValue":37442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314554,"nanos":751692502},"http":{"id":"a0933774-b461-4ec4-abb6-8eb795589e92","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ib4pFslNkok5gJHd_7oUiyx3clG0xYyeeK8nHQCVCw4N4Lwpl9528DDIQK92"} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ib4pFslNkok5gJHd_7oUiyx3clG0xYyeeK8nHQCVCw4N4Lwpl9528DDIQK92\"}"} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"32b47901-10e8-4200-8260-3b42d7a31fbe","keyName":"e2e-rate-a-d05ebb","subscription":"e2e-rate-iso-a-d05ebb","tenant":"e2e-shared-a-4280a6","userId":"32b47901-10e8-4200-8260-3b42d7a31fbe","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\",\"requestedSubscription\":\"e2e-rate-iso-a-d05ebb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d05ebb","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d05ebb"} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"32b47901-10e8-4200-8260-3b42d7a31fbe","keyName":"e2e-rate-a-d05ebb","selected_subscription":"e2e-rate-iso-a-d05ebb","selected_subscription_key":"ai-tenant-e2e-shared-a-4280a6/e2e-rate-iso-a-d05ebb@ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d05ebb","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37454","PortSpecifier":{"PortValue":37454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","method":"POST","path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37454","PortSpecifier":{"PortValue":37454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314555,"nanos":839439552},"http":{"id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ib4pFslNkok5gJHd_7oUiyx3clG0xYyeeK8nHQCVCw4N4Lwpl9528DDIQK92"} {"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ib4pFslNkok5gJHd_7oUiyx3clG0xYyeeK8nHQCVCw4N4Lwpl9528DDIQK92\"}"} {"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"32b47901-10e8-4200-8260-3b42d7a31fbe","keyName":"e2e-rate-a-d05ebb","subscription":"e2e-rate-iso-a-d05ebb","tenant":"e2e-shared-a-4280a6","userId":"32b47901-10e8-4200-8260-3b42d7a31fbe","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\",\"requestedSubscription\":\"e2e-rate-iso-a-d05ebb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d05ebb","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d05ebb"} {"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"32b47901-10e8-4200-8260-3b42d7a31fbe","keyName":"e2e-rate-a-d05ebb","selected_subscription":"e2e-rate-iso-a-d05ebb","selected_subscription_key":"ai-tenant-e2e-shared-a-4280a6/e2e-rate-iso-a-d05ebb@ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d05ebb","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37462","PortSpecifier":{"PortValue":37462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb9a0523-0005-44c5-a2f3-f779ab188272","method":"POST","path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37462","PortSpecifier":{"PortValue":37462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314556,"nanos":881525814},"http":{"id":"cb9a0523-0005-44c5-a2f3-f779ab188272","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ib4pFslNkok5gJHd_7oUiyx3clG0xYyeeK8nHQCVCw4N4Lwpl9528DDIQK92"} {"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ib4pFslNkok5gJHd_7oUiyx3clG0xYyeeK8nHQCVCw4N4Lwpl9528DDIQK92\"}"} {"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"32b47901-10e8-4200-8260-3b42d7a31fbe","keyName":"e2e-rate-a-d05ebb","subscription":"e2e-rate-iso-a-d05ebb","tenant":"e2e-shared-a-4280a6","userId":"32b47901-10e8-4200-8260-3b42d7a31fbe","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\",\"requestedSubscription\":\"e2e-rate-iso-a-d05ebb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d05ebb","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d05ebb"} {"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"32b47901-10e8-4200-8260-3b42d7a31fbe","keyName":"e2e-rate-a-d05ebb","selected_subscription":"e2e-rate-iso-a-d05ebb","selected_subscription_key":"ai-tenant-e2e-shared-a-4280a6/e2e-rate-iso-a-d05ebb@ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d05ebb","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59380","PortSpecifier":{"PortValue":59380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59380","PortSpecifier":{"PortValue":59380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314569,"nanos":827377788},"http":{"id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34674","PortSpecifier":{"PortValue":34674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34674","PortSpecifier":{"PortValue":34674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314569,"nanos":865110104},"http":{"id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","method":"POST","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/rate-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59386","PortSpecifier":{"PortValue":59386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","method":"POST","path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59386","PortSpecifier":{"PortValue":59386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314569,"nanos":901128598},"http":{"id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HUYEu1rULE4zeQBL_3ANG3vJBL9UPfnUGceFgh8tJ1fI3AC6OcxoXpvCbNBR"} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HUYEu1rULE4zeQBL_3ANG3vJBL9UPfnUGceFgh8tJ1fI3AC6OcxoXpvCbNBR\"}"} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","keyName":"e2e-rate-a-8b55fa","subscription":"e2e-rate-iso-a-8b55fa","tenant":"e2e-shared-a-4280a6","userId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\",\"requestedSubscription\":\"e2e-rate-iso-a-8b55fa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b55fa","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b55fa"} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","keyName":"e2e-rate-a-8b55fa","selected_subscription":"e2e-rate-iso-a-8b55fa","selected_subscription_key":"ai-tenant-e2e-shared-a-4280a6/e2e-rate-iso-a-8b55fa@ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b55fa","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59392","PortSpecifier":{"PortValue":59392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","method":"POST","path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59392","PortSpecifier":{"PortValue":59392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314570,"nanos":934655728},"http":{"id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HUYEu1rULE4zeQBL_3ANG3vJBL9UPfnUGceFgh8tJ1fI3AC6OcxoXpvCbNBR"} {"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HUYEu1rULE4zeQBL_3ANG3vJBL9UPfnUGceFgh8tJ1fI3AC6OcxoXpvCbNBR\"}"} {"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","keyName":"e2e-rate-a-8b55fa","subscription":"e2e-rate-iso-a-8b55fa","tenant":"e2e-shared-a-4280a6","userId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\",\"requestedSubscription\":\"e2e-rate-iso-a-8b55fa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b55fa","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b55fa"} {"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","keyName":"e2e-rate-a-8b55fa","selected_subscription":"e2e-rate-iso-a-8b55fa","selected_subscription_key":"ai-tenant-e2e-shared-a-4280a6/e2e-rate-iso-a-8b55fa@ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b55fa","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59400","PortSpecifier":{"PortValue":59400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","method":"POST","path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59400","PortSpecifier":{"PortValue":59400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314571,"nanos":975892286},"http":{"id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HUYEu1rULE4zeQBL_3ANG3vJBL9UPfnUGceFgh8tJ1fI3AC6OcxoXpvCbNBR"} {"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HUYEu1rULE4zeQBL_3ANG3vJBL9UPfnUGceFgh8tJ1fI3AC6OcxoXpvCbNBR\"}"} {"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","keyName":"e2e-rate-a-8b55fa","subscription":"e2e-rate-iso-a-8b55fa","tenant":"e2e-shared-a-4280a6","userId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\",\"requestedSubscription\":\"e2e-rate-iso-a-8b55fa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b55fa","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b55fa"} {"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","keyName":"e2e-rate-a-8b55fa","selected_subscription":"e2e-rate-iso-a-8b55fa","selected_subscription_key":"ai-tenant-e2e-shared-a-4280a6/e2e-rate-iso-a-8b55fa@ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b55fa","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34682","PortSpecifier":{"PortValue":34682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","method":"POST","path":"/ai-tenant-e2e-shared-b-1671a0/rate-test-model-1671a0/v1/completions","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34682","PortSpecifier":{"PortValue":34682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314572,"nanos":9284898},"http":{"id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","method":"POST","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1671a0/rate-test-model-1671a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18e05nYM2ZMy5xfrN_Y7CXoY41Jfx1AaLjH7HWRcQaDLmLvF18jArmPm44hqK"} {"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1671a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18e05nYM2ZMy5xfrN_Y7CXoY41Jfx1AaLjH7HWRcQaDLmLvF18jArmPm44hqK\"}"} {"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1671a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"075bde58-9004-457a-8d53-9a20da865264","keyName":"e2e-rate-b-8b55fa","subscription":"e2e-rate-iso-b-8b55fa","tenant":"e2e-shared-b-1671a0","userId":"075bde58-9004-457a-8d53-9a20da865264","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1671a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-1671a0/rate-test-model-1671a0\",\"requestedSubscription\":\"e2e-rate-iso-b-8b55fa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1671a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1671a0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8b55fa","namespace":"ai-tenant-e2e-shared-b-1671a0","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/rate-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8b55fa"} {"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"075bde58-9004-457a-8d53-9a20da865264","keyName":"e2e-rate-b-8b55fa","selected_subscription":"e2e-rate-iso-b-8b55fa","selected_subscription_key":"ai-tenant-e2e-shared-b-1671a0/e2e-rate-iso-b-8b55fa@ai-tenant-e2e-shared-b-1671a0/rate-test-model-1671a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1671a0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8b55fa","namespace":"ai-tenant-e2e-shared-b-1671a0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d"} {"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"} {"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5"} {"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03"} {"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3"} {"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57"} {"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"} {"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"} {"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99"} {"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37"} {"level":"info","ts":"2026-07-17T18:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed"} {"level":"info","ts":"2026-07-17T18:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"} {"level":"info","ts":"2026-07-17T18:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"} {"level":"info","ts":"2026-07-17T18:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"} {"level":"info","ts":"2026-07-17T18:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9"} {"level":"info","ts":"2026-07-17T18:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"} {"level":"info","ts":"2026-07-17T18:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"} {"level":"info","ts":"2026-07-17T18:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9"} {"level":"info","ts":"2026-07-17T18:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"} {"level":"info","ts":"2026-07-17T18:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7"} {"level":"info","ts":"2026-07-17T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"} {"level":"info","ts":"2026-07-17T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"} {"level":"info","ts":"2026-07-17T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821"} {"level":"info","ts":"2026-07-17T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42"}