--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458ed801154ec77cec4db9b5cc5643dbeb911b357cc24bbbd7c9b29d1f4dd4f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458ed801154ec77cec4db9b5cc5643dbeb911b357cc24bbbd7c9b29d1f4dd4f6"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9e83da5d422686ebcd5355b40a8d9fc75296653a3ce80332db3e303bdbab8d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9e83da5d422686ebcd5355b40a8d9fc75296653a3ce80332db3e303bdbab8d6"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9e83da5d422686ebcd5355b40a8d9fc75296653a3ce80332db3e303bdbab8d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458ed801154ec77cec4db9b5cc5643dbeb911b357cc24bbbd7c9b29d1f4dd4f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458ed801154ec77cec4db9b5cc5643dbeb911b357cc24bbbd7c9b29d1f4dd4f6"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458ed801154ec77cec4db9b5cc5643dbeb911b357cc24bbbd7c9b29d1f4dd4f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9e83da5d422686ebcd5355b40a8d9fc75296653a3ce80332db3e303bdbab8d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9e83da5d422686ebcd5355b40a8d9fc75296653a3ce80332db3e303bdbab8d6"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f958184cb5bd05e08a9751aff1741eefe3678e768d951f0eaf423e1c9c9438ce"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458ed801154ec77cec4db9b5cc5643dbeb911b357cc24bbbd7c9b29d1f4dd4f6"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9e83da5d422686ebcd5355b40a8d9fc75296653a3ce80332db3e303bdbab8d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f958184cb5bd05e08a9751aff1741eefe3678e768d951f0eaf423e1c9c9438ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f958184cb5bd05e08a9751aff1741eefe3678e768d951f0eaf423e1c9c9438ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9e83da5d422686ebcd5355b40a8d9fc75296653a3ce80332db3e303bdbab8d6"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c8cb9d4a8075ca6c0bbf23504b150b9178970eff1720d70c982c1db6e2873f4"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f958184cb5bd05e08a9751aff1741eefe3678e768d951f0eaf423e1c9c9438ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458ed801154ec77cec4db9b5cc5643dbeb911b357cc24bbbd7c9b29d1f4dd4f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["458ed801154ec77cec4db9b5cc5643dbeb911b357cc24bbbd7c9b29d1f4dd4f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f958184cb5bd05e08a9751aff1741eefe3678e768d951f0eaf423e1c9c9438ce"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458ed801154ec77cec4db9b5cc5643dbeb911b357cc24bbbd7c9b29d1f4dd4f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9e83da5d422686ebcd5355b40a8d9fc75296653a3ce80332db3e303bdbab8d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9e83da5d422686ebcd5355b40a8d9fc75296653a3ce80332db3e303bdbab8d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458ed801154ec77cec4db9b5cc5643dbeb911b357cc24bbbd7c9b29d1f4dd4f6"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9e83da5d422686ebcd5355b40a8d9fc75296653a3ce80332db3e303bdbab8d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c8cb9d4a8075ca6c0bbf23504b150b9178970eff1720d70c982c1db6e2873f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c8cb9d4a8075ca6c0bbf23504b150b9178970eff1720d70c982c1db6e2873f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43ad1fc3cf9cb3d3082719cdb9c4155e359ef7f385148e3470fafb76c67a71f6"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9e83da5d422686ebcd5355b40a8d9fc75296653a3ce80332db3e303bdbab8d6"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c8cb9d4a8075ca6c0bbf23504b150b9178970eff1720d70c982c1db6e2873f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f958184cb5bd05e08a9751aff1741eefe3678e768d951f0eaf423e1c9c9438ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458ed801154ec77cec4db9b5cc5643dbeb911b357cc24bbbd7c9b29d1f4dd4f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43ad1fc3cf9cb3d3082719cdb9c4155e359ef7f385148e3470fafb76c67a71f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43ad1fc3cf9cb3d3082719cdb9c4155e359ef7f385148e3470fafb76c67a71f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4af3228d8c8d4a061aaf61bd30741b4e6a47a2a296be098f123a8a4e59ecfce1"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43ad1fc3cf9cb3d3082719cdb9c4155e359ef7f385148e3470fafb76c67a71f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4af3228d8c8d4a061aaf61bd30741b4e6a47a2a296be098f123a8a4e59ecfce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4af3228d8c8d4a061aaf61bd30741b4e6a47a2a296be098f123a8a4e59ecfce1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c8cb9d4a8075ca6c0bbf23504b150b9178970eff1720d70c982c1db6e2873f4"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4af3228d8c8d4a061aaf61bd30741b4e6a47a2a296be098f123a8a4e59ecfce1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9e83da5d422686ebcd5355b40a8d9fc75296653a3ce80332db3e303bdbab8d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43ad1fc3cf9cb3d3082719cdb9c4155e359ef7f385148e3470fafb76c67a71f6"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c8cb9d4a8075ca6c0bbf23504b150b9178970eff1720d70c982c1db6e2873f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4af3228d8c8d4a061aaf61bd30741b4e6a47a2a296be098f123a8a4e59ecfce1"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43ad1fc3cf9cb3d3082719cdb9c4155e359ef7f385148e3470fafb76c67a71f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4af3228d8c8d4a061aaf61bd30741b4e6a47a2a296be098f123a8a4e59ecfce1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6"} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6"} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6"} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6"} {"level":"error","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb"} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb"} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb"} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49fa93425c8cf8ac1caa702695d8f7ba1cb9044924e73a1ade20c5f04c014ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49fa93425c8cf8ac1caa702695d8f7ba1cb9044924e73a1ade20c5f04c014ef1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49fa93425c8cf8ac1caa702695d8f7ba1cb9044924e73a1ade20c5f04c014ef1"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49fa93425c8cf8ac1caa702695d8f7ba1cb9044924e73a1ade20c5f04c014ef1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49fa93425c8cf8ac1caa702695d8f7ba1cb9044924e73a1ade20c5f04c014ef1"} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49fa93425c8cf8ac1caa702695d8f7ba1cb9044924e73a1ade20c5f04c014ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49fa93425c8cf8ac1caa702695d8f7ba1cb9044924e73a1ade20c5f04c014ef1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49fa93425c8cf8ac1caa702695d8f7ba1cb9044924e73a1ade20c5f04c014ef1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49fa93425c8cf8ac1caa702695d8f7ba1cb9044924e73a1ade20c5f04c014ef1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49fa93425c8cf8ac1caa702695d8f7ba1cb9044924e73a1ade20c5f04c014ef1"} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c"} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c"} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c"} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737"} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737"} {"level":"error","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3"} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84dffed7d4cbede496b96e302833053263daf540cd0c860a31a09d9bb45ea39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84dffed7d4cbede496b96e302833053263daf540cd0c860a31a09d9bb45ea39"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84dffed7d4cbede496b96e302833053263daf540cd0c860a31a09d9bb45ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84dffed7d4cbede496b96e302833053263daf540cd0c860a31a09d9bb45ea39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c84dffed7d4cbede496b96e302833053263daf540cd0c860a31a09d9bb45ea39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84dffed7d4cbede496b96e302833053263daf540cd0c860a31a09d9bb45ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84dffed7d4cbede496b96e302833053263daf540cd0c860a31a09d9bb45ea39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84dffed7d4cbede496b96e302833053263daf540cd0c860a31a09d9bb45ea39"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84dffed7d4cbede496b96e302833053263daf540cd0c860a31a09d9bb45ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d06ba1ecdc79e11f078806bb5aab3053d820b16adf819ed3d4790df0d0876a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d06ba1ecdc79e11f078806bb5aab3053d820b16adf819ed3d4790df0d0876a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84dffed7d4cbede496b96e302833053263daf540cd0c860a31a09d9bb45ea39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c84dffed7d4cbede496b96e302833053263daf540cd0c860a31a09d9bb45ea39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84dffed7d4cbede496b96e302833053263daf540cd0c860a31a09d9bb45ea39"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84dffed7d4cbede496b96e302833053263daf540cd0c860a31a09d9bb45ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d06ba1ecdc79e11f078806bb5aab3053d820b16adf819ed3d4790df0d0876a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d06ba1ecdc79e11f078806bb5aab3053d820b16adf819ed3d4790df0d0876a6"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84dffed7d4cbede496b96e302833053263daf540cd0c860a31a09d9bb45ea39"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d06ba1ecdc79e11f078806bb5aab3053d820b16adf819ed3d4790df0d0876a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84dffed7d4cbede496b96e302833053263daf540cd0c860a31a09d9bb45ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d5a12576fd4e2e05341d3dc43fcad84c74b7eaa6be782fbdc895d98c0cc10ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5a12576fd4e2e05341d3dc43fcad84c74b7eaa6be782fbdc895d98c0cc10ed"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d06ba1ecdc79e11f078806bb5aab3053d820b16adf819ed3d4790df0d0876a6"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d5a12576fd4e2e05341d3dc43fcad84c74b7eaa6be782fbdc895d98c0cc10ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d06ba1ecdc79e11f078806bb5aab3053d820b16adf819ed3d4790df0d0876a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d06ba1ecdc79e11f078806bb5aab3053d820b16adf819ed3d4790df0d0876a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5a12576fd4e2e05341d3dc43fcad84c74b7eaa6be782fbdc895d98c0cc10ed"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d06ba1ecdc79e11f078806bb5aab3053d820b16adf819ed3d4790df0d0876a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d5a12576fd4e2e05341d3dc43fcad84c74b7eaa6be782fbdc895d98c0cc10ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d5a12576fd4e2e05341d3dc43fcad84c74b7eaa6be782fbdc895d98c0cc10ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d06ba1ecdc79e11f078806bb5aab3053d820b16adf819ed3d4790df0d0876a6"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d5a12576fd4e2e05341d3dc43fcad84c74b7eaa6be782fbdc895d98c0cc10ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5a12576fd4e2e05341d3dc43fcad84c74b7eaa6be782fbdc895d98c0cc10ed"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d06ba1ecdc79e11f078806bb5aab3053d820b16adf819ed3d4790df0d0876a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d5a12576fd4e2e05341d3dc43fcad84c74b7eaa6be782fbdc895d98c0cc10ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"} {"level":"info","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"} {"level":"debug","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"} {"level":"debug","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"} {"level":"debug","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"} {"level":"info","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"} {"level":"debug","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:46:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:46:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"} {"level":"info","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"} {"level":"debug","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:46:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:46:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"} {"level":"info","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53918b98-25ac-4d6d-8678-a27e4f3713b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43906","PortSpecifier":{"PortValue":43906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53918b98-25ac-4d6d-8678-a27e4f3713b6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53918b98-25ac-4d6d-8678-a27e4f3713b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43906","PortSpecifier":{"PortValue":43906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051208,"nanos":349670311},"http":{"id":"53918b98-25ac-4d6d-8678-a27e4f3713b6","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"53918b98-25ac-4d6d-8678-a27e4f3713b6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53918b98-25ac-4d6d-8678-a27e4f3713b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53918b98-25ac-4d6d-8678-a27e4f3713b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53918b98-25ac-4d6d-8678-a27e4f3713b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53918b98-25ac-4d6d-8678-a27e4f3713b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53918b98-25ac-4d6d-8678-a27e4f3713b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/auth-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"53918b98-25ac-4d6d-8678-a27e4f3713b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53918b98-25ac-4d6d-8678-a27e4f3713b6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53918b98-25ac-4d6d-8678-a27e4f3713b6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53918b98-25ac-4d6d-8678-a27e4f3713b6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53918b98-25ac-4d6d-8678-a27e4f3713b6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32cadcfd-cd23-49a8-a3be-df15269c3f62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54688","PortSpecifier":{"PortValue":54688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32cadcfd-cd23-49a8-a3be-df15269c3f62","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32cadcfd-cd23-49a8-a3be-df15269c3f62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54688","PortSpecifier":{"PortValue":54688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051208,"nanos":413108344},"http":{"id":"32cadcfd-cd23-49a8-a3be-df15269c3f62","method":"POST","headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"32cadcfd-cd23-49a8-a3be-df15269c3f62","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32cadcfd-cd23-49a8-a3be-df15269c3f62","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32cadcfd-cd23-49a8-a3be-df15269c3f62","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32cadcfd-cd23-49a8-a3be-df15269c3f62","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32cadcfd-cd23-49a8-a3be-df15269c3f62","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32cadcfd-cd23-49a8-a3be-df15269c3f62","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-df3dc5/auth-test-model-df3dc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-df3dc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32cadcfd-cd23-49a8-a3be-df15269c3f62","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32cadcfd-cd23-49a8-a3be-df15269c3f62","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32cadcfd-cd23-49a8-a3be-df15269c3f62","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32cadcfd-cd23-49a8-a3be-df15269c3f62","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32cadcfd-cd23-49a8-a3be-df15269c3f62","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7880e39-4dea-49a7-86c2-4ab84562da9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43914","PortSpecifier":{"PortValue":43914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7880e39-4dea-49a7-86c2-4ab84562da9a","method":"GET","path":"/maas-api/v1/api-keys/e2008fcc-86f1-4a43-a8d4-67f9fc1b6012","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7880e39-4dea-49a7-86c2-4ab84562da9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43914","PortSpecifier":{"PortValue":43914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051208,"nanos":479375372},"http":{"id":"f7880e39-4dea-49a7-86c2-4ab84562da9a","method":"GET","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e2008fcc-86f1-4a43-a8d4-67f9fc1b6012",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7880e39-4dea-49a7-86c2-4ab84562da9a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7880e39-4dea-49a7-86c2-4ab84562da9a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7880e39-4dea-49a7-86c2-4ab84562da9a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e2008fcc-86f1-4a43-a8d4-67f9fc1b6012",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7880e39-4dea-49a7-86c2-4ab84562da9a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7880e39-4dea-49a7-86c2-4ab84562da9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7880e39-4dea-49a7-86c2-4ab84562da9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/auth-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7880e39-4dea-49a7-86c2-4ab84562da9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7880e39-4dea-49a7-86c2-4ab84562da9a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7880e39-4dea-49a7-86c2-4ab84562da9a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7880e39-4dea-49a7-86c2-4ab84562da9a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7880e39-4dea-49a7-86c2-4ab84562da9a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f270143-bf81-4fc8-9469-b69b1f2a1668","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54690","PortSpecifier":{"PortValue":54690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f270143-bf81-4fc8-9469-b69b1f2a1668","method":"GET","path":"/maas-api/v1/api-keys/b7f4c9b3-9078-4f1c-852d-10c746d970bc","host":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f270143-bf81-4fc8-9469-b69b1f2a1668","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54690","PortSpecifier":{"PortValue":54690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051208,"nanos":520236382},"http":{"id":"5f270143-bf81-4fc8-9469-b69b1f2a1668","method":"GET","headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b7f4c9b3-9078-4f1c-852d-10c746d970bc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f270143-bf81-4fc8-9469-b69b1f2a1668","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f270143-bf81-4fc8-9469-b69b1f2a1668","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f270143-bf81-4fc8-9469-b69b1f2a1668","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b7f4c9b3-9078-4f1c-852d-10c746d970bc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f270143-bf81-4fc8-9469-b69b1f2a1668","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f270143-bf81-4fc8-9469-b69b1f2a1668","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f270143-bf81-4fc8-9469-b69b1f2a1668","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-df3dc5/auth-test-model-df3dc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-df3dc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f270143-bf81-4fc8-9469-b69b1f2a1668","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f270143-bf81-4fc8-9469-b69b1f2a1668","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f270143-bf81-4fc8-9469-b69b1f2a1668","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f270143-bf81-4fc8-9469-b69b1f2a1668","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:46:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f270143-bf81-4fc8-9469-b69b1f2a1668","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:47:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2fd2d68-cc09-4211-8468-0cf99893edb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59256","PortSpecifier":{"PortValue":59256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2fd2d68-cc09-4211-8468-0cf99893edb6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:47:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2fd2d68-cc09-4211-8468-0cf99893edb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59256","PortSpecifier":{"PortValue":59256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051226,"nanos":971888030},"http":{"id":"f2fd2d68-cc09-4211-8468-0cf99893edb6","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f2fd2d68-cc09-4211-8468-0cf99893edb6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:47:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2fd2d68-cc09-4211-8468-0cf99893edb6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2fd2d68-cc09-4211-8468-0cf99893edb6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2fd2d68-cc09-4211-8468-0cf99893edb6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2fd2d68-cc09-4211-8468-0cf99893edb6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2fd2d68-cc09-4211-8468-0cf99893edb6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/auth-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f2fd2d68-cc09-4211-8468-0cf99893edb6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2fd2d68-cc09-4211-8468-0cf99893edb6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2fd2d68-cc09-4211-8468-0cf99893edb6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:47:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2fd2d68-cc09-4211-8468-0cf99893edb6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:47:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2fd2d68-cc09-4211-8468-0cf99893edb6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5904d55-b6e2-4936-81c1-aaa650e7a3db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58788","PortSpecifier":{"PortValue":58788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5904d55-b6e2-4936-81c1-aaa650e7a3db","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5904d55-b6e2-4936-81c1-aaa650e7a3db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58788","PortSpecifier":{"PortValue":58788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051227,"nanos":12759081},"http":{"id":"b5904d55-b6e2-4936-81c1-aaa650e7a3db","method":"POST","headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b5904d55-b6e2-4936-81c1-aaa650e7a3db","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5904d55-b6e2-4936-81c1-aaa650e7a3db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5904d55-b6e2-4936-81c1-aaa650e7a3db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5904d55-b6e2-4936-81c1-aaa650e7a3db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5904d55-b6e2-4936-81c1-aaa650e7a3db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5904d55-b6e2-4936-81c1-aaa650e7a3db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-df3dc5/auth-test-model-df3dc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-df3dc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5904d55-b6e2-4936-81c1-aaa650e7a3db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5904d55-b6e2-4936-81c1-aaa650e7a3db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5904d55-b6e2-4936-81c1-aaa650e7a3db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5904d55-b6e2-4936-81c1-aaa650e7a3db","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5904d55-b6e2-4936-81c1-aaa650e7a3db","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30d83089-a656-4b3b-89cd-92ca645eddf8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59264","PortSpecifier":{"PortValue":59264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30d83089-a656-4b3b-89cd-92ca645eddf8","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30d83089-a656-4b3b-89cd-92ca645eddf8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59264","PortSpecifier":{"PortValue":59264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051227,"nanos":55624755},"http":{"id":"30d83089-a656-4b3b-89cd-92ca645eddf8","method":"GET","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30d83089-a656-4b3b-89cd-92ca645eddf8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NtYii0048raBlKRi_gT5PSY2YkYnpcvdNlFcvPoM941h3mOSUSg9tm0VvwR"} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"30d83089-a656-4b3b-89cd-92ca645eddf8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NtYii0048raBlKRi_gT5PSY2YkYnpcvdNlFcvPoM941h3mOSUSg9tm0VvwR\"}"} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"30d83089-a656-4b3b-89cd-92ca645eddf8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e890862-0d36-45ea-a244-9497a21b4c62","keyName":"e2e-auth-iso-a-849b98","subscription":"e2e-auth-iso-6406f3","tenant":"e2e-shared-a-246d80","userId":"3e890862-0d36-45ea-a244-9497a21b4c62","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30d83089-a656-4b3b-89cd-92ca645eddf8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30d83089-a656-4b3b-89cd-92ca645eddf8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30d83089-a656-4b3b-89cd-92ca645eddf8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30d83089-a656-4b3b-89cd-92ca645eddf8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/auth-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30d83089-a656-4b3b-89cd-92ca645eddf8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30d83089-a656-4b3b-89cd-92ca645eddf8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30d83089-a656-4b3b-89cd-92ca645eddf8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30d83089-a656-4b3b-89cd-92ca645eddf8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-6406f3"} {"level":"info","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30d83089-a656-4b3b-89cd-92ca645eddf8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30d83089-a656-4b3b-89cd-92ca645eddf8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0d6e70c-33af-4c5d-9ff1-2305ba0e8287","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57404","PortSpecifier":{"PortValue":57404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0d6e70c-33af-4c5d-9ff1-2305ba0e8287","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0d6e70c-33af-4c5d-9ff1-2305ba0e8287","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57404","PortSpecifier":{"PortValue":57404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051245,"nanos":327603111},"http":{"id":"e0d6e70c-33af-4c5d-9ff1-2305ba0e8287","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e0d6e70c-33af-4c5d-9ff1-2305ba0e8287","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0d6e70c-33af-4c5d-9ff1-2305ba0e8287","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0d6e70c-33af-4c5d-9ff1-2305ba0e8287","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0d6e70c-33af-4c5d-9ff1-2305ba0e8287","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0d6e70c-33af-4c5d-9ff1-2305ba0e8287","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0d6e70c-33af-4c5d-9ff1-2305ba0e8287","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/auth-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e0d6e70c-33af-4c5d-9ff1-2305ba0e8287","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0d6e70c-33af-4c5d-9ff1-2305ba0e8287","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0d6e70c-33af-4c5d-9ff1-2305ba0e8287","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0d6e70c-33af-4c5d-9ff1-2305ba0e8287","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0d6e70c-33af-4c5d-9ff1-2305ba0e8287","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0c56664-f101-4363-88bb-d3f9a58ac5eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52766","PortSpecifier":{"PortValue":52766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0c56664-f101-4363-88bb-d3f9a58ac5eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0c56664-f101-4363-88bb-d3f9a58ac5eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52766","PortSpecifier":{"PortValue":52766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051245,"nanos":365675953},"http":{"id":"b0c56664-f101-4363-88bb-d3f9a58ac5eb","method":"POST","headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b0c56664-f101-4363-88bb-d3f9a58ac5eb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0c56664-f101-4363-88bb-d3f9a58ac5eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0c56664-f101-4363-88bb-d3f9a58ac5eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0c56664-f101-4363-88bb-d3f9a58ac5eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0c56664-f101-4363-88bb-d3f9a58ac5eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0c56664-f101-4363-88bb-d3f9a58ac5eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-df3dc5/auth-test-model-df3dc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-df3dc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b0c56664-f101-4363-88bb-d3f9a58ac5eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0c56664-f101-4363-88bb-d3f9a58ac5eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0c56664-f101-4363-88bb-d3f9a58ac5eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0c56664-f101-4363-88bb-d3f9a58ac5eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0c56664-f101-4363-88bb-d3f9a58ac5eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f44af4c4-9e03-47ad-8a6f-a51a1b2d2966","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52774","PortSpecifier":{"PortValue":52774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f44af4c4-9e03-47ad-8a6f-a51a1b2d2966","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f44af4c4-9e03-47ad-8a6f-a51a1b2d2966","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52774","PortSpecifier":{"PortValue":52774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051245,"nanos":404502122},"http":{"id":"f44af4c4-9e03-47ad-8a6f-a51a1b2d2966","method":"GET","headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f44af4c4-9e03-47ad-8a6f-a51a1b2d2966","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FJ9mITUIIlZxnIcq_pVYsp9f6CEF6qdhewZWKGhZ2Ag0h41sRuSaszTcxHP8"} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f44af4c4-9e03-47ad-8a6f-a51a1b2d2966","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-df3dc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FJ9mITUIIlZxnIcq_pVYsp9f6CEF6qdhewZWKGhZ2Ag0h41sRuSaszTcxHP8\"}"} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f44af4c4-9e03-47ad-8a6f-a51a1b2d2966","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-df3dc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f44af4c4-9e03-47ad-8a6f-a51a1b2d2966","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f44af4c4-9e03-47ad-8a6f-a51a1b2d2966","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"f44af4c4-9e03-47ad-8a6f-a51a1b2d2966","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f44af4c4-9e03-47ad-8a6f-a51a1b2d2966","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-14T17:47:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f44af4c4-9e03-47ad-8a6f-a51a1b2d2966","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0aba70e1-6b42-4950-9bef-da26bd937ea0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53276","PortSpecifier":{"PortValue":53276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0aba70e1-6b42-4950-9bef-da26bd937ea0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0aba70e1-6b42-4950-9bef-da26bd937ea0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53276","PortSpecifier":{"PortValue":53276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051269,"nanos":819177476},"http":{"id":"0aba70e1-6b42-4950-9bef-da26bd937ea0","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0aba70e1-6b42-4950-9bef-da26bd937ea0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0aba70e1-6b42-4950-9bef-da26bd937ea0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0aba70e1-6b42-4950-9bef-da26bd937ea0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aba70e1-6b42-4950-9bef-da26bd937ea0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aba70e1-6b42-4950-9bef-da26bd937ea0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aba70e1-6b42-4950-9bef-da26bd937ea0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/auth-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0aba70e1-6b42-4950-9bef-da26bd937ea0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0aba70e1-6b42-4950-9bef-da26bd937ea0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0aba70e1-6b42-4950-9bef-da26bd937ea0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0aba70e1-6b42-4950-9bef-da26bd937ea0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0aba70e1-6b42-4950-9bef-da26bd937ea0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc9c1e55-c016-4bd9-8584-8247dfa93c94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59538","PortSpecifier":{"PortValue":59538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc9c1e55-c016-4bd9-8584-8247dfa93c94","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc9c1e55-c016-4bd9-8584-8247dfa93c94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59538","PortSpecifier":{"PortValue":59538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051269,"nanos":862984489},"http":{"id":"cc9c1e55-c016-4bd9-8584-8247dfa93c94","method":"POST","headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc9c1e55-c016-4bd9-8584-8247dfa93c94","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc9c1e55-c016-4bd9-8584-8247dfa93c94","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc9c1e55-c016-4bd9-8584-8247dfa93c94","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc9c1e55-c016-4bd9-8584-8247dfa93c94","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc9c1e55-c016-4bd9-8584-8247dfa93c94","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc9c1e55-c016-4bd9-8584-8247dfa93c94","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-df3dc5/auth-test-model-df3dc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-df3dc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc9c1e55-c016-4bd9-8584-8247dfa93c94","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc9c1e55-c016-4bd9-8584-8247dfa93c94","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc9c1e55-c016-4bd9-8584-8247dfa93c94","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc9c1e55-c016-4bd9-8584-8247dfa93c94","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc9c1e55-c016-4bd9-8584-8247dfa93c94","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91866ce0-c3a6-4de5-bf2f-e455213b7dd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53278","PortSpecifier":{"PortValue":53278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91866ce0-c3a6-4de5-bf2f-e455213b7dd4","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91866ce0-c3a6-4de5-bf2f-e455213b7dd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53278","PortSpecifier":{"PortValue":53278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051269,"nanos":903913587},"http":{"id":"91866ce0-c3a6-4de5-bf2f-e455213b7dd4","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"91866ce0-c3a6-4de5-bf2f-e455213b7dd4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91866ce0-c3a6-4de5-bf2f-e455213b7dd4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91866ce0-c3a6-4de5-bf2f-e455213b7dd4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91866ce0-c3a6-4de5-bf2f-e455213b7dd4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91866ce0-c3a6-4de5-bf2f-e455213b7dd4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91866ce0-c3a6-4de5-bf2f-e455213b7dd4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/auth-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"91866ce0-c3a6-4de5-bf2f-e455213b7dd4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91866ce0-c3a6-4de5-bf2f-e455213b7dd4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91866ce0-c3a6-4de5-bf2f-e455213b7dd4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91866ce0-c3a6-4de5-bf2f-e455213b7dd4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91866ce0-c3a6-4de5-bf2f-e455213b7dd4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3383b382-3593-4d5f-9085-416139e20dfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59542","PortSpecifier":{"PortValue":59542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3383b382-3593-4d5f-9085-416139e20dfb","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3383b382-3593-4d5f-9085-416139e20dfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59542","PortSpecifier":{"PortValue":59542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051269,"nanos":946608806},"http":{"id":"3383b382-3593-4d5f-9085-416139e20dfb","method":"POST","headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3383b382-3593-4d5f-9085-416139e20dfb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3383b382-3593-4d5f-9085-416139e20dfb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3383b382-3593-4d5f-9085-416139e20dfb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3383b382-3593-4d5f-9085-416139e20dfb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3383b382-3593-4d5f-9085-416139e20dfb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3383b382-3593-4d5f-9085-416139e20dfb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-df3dc5/auth-test-model-df3dc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-df3dc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3383b382-3593-4d5f-9085-416139e20dfb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3383b382-3593-4d5f-9085-416139e20dfb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3383b382-3593-4d5f-9085-416139e20dfb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3383b382-3593-4d5f-9085-416139e20dfb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3383b382-3593-4d5f-9085-416139e20dfb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b692ea12-cd98-44c8-b5b7-ad5d5dcbd4c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60230","PortSpecifier":{"PortValue":60230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b692ea12-cd98-44c8-b5b7-ad5d5dcbd4c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b692ea12-cd98-44c8-b5b7-ad5d5dcbd4c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60230","PortSpecifier":{"PortValue":60230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051287,"nanos":239677984},"http":{"id":"b692ea12-cd98-44c8-b5b7-ad5d5dcbd4c7","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b692ea12-cd98-44c8-b5b7-ad5d5dcbd4c7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b692ea12-cd98-44c8-b5b7-ad5d5dcbd4c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b692ea12-cd98-44c8-b5b7-ad5d5dcbd4c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b692ea12-cd98-44c8-b5b7-ad5d5dcbd4c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b692ea12-cd98-44c8-b5b7-ad5d5dcbd4c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b692ea12-cd98-44c8-b5b7-ad5d5dcbd4c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/auth-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b692ea12-cd98-44c8-b5b7-ad5d5dcbd4c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b692ea12-cd98-44c8-b5b7-ad5d5dcbd4c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b692ea12-cd98-44c8-b5b7-ad5d5dcbd4c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b692ea12-cd98-44c8-b5b7-ad5d5dcbd4c7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b692ea12-cd98-44c8-b5b7-ad5d5dcbd4c7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee8ff716-5b84-4bc1-bd17-0349976c084f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53334","PortSpecifier":{"PortValue":53334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee8ff716-5b84-4bc1-bd17-0349976c084f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee8ff716-5b84-4bc1-bd17-0349976c084f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53334","PortSpecifier":{"PortValue":53334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051287,"nanos":278378909},"http":{"id":"ee8ff716-5b84-4bc1-bd17-0349976c084f","method":"POST","headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ee8ff716-5b84-4bc1-bd17-0349976c084f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee8ff716-5b84-4bc1-bd17-0349976c084f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee8ff716-5b84-4bc1-bd17-0349976c084f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee8ff716-5b84-4bc1-bd17-0349976c084f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee8ff716-5b84-4bc1-bd17-0349976c084f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee8ff716-5b84-4bc1-bd17-0349976c084f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-df3dc5/auth-test-model-df3dc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-df3dc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ee8ff716-5b84-4bc1-bd17-0349976c084f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee8ff716-5b84-4bc1-bd17-0349976c084f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee8ff716-5b84-4bc1-bd17-0349976c084f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee8ff716-5b84-4bc1-bd17-0349976c084f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee8ff716-5b84-4bc1-bd17-0349976c084f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"457ad418-51f0-4be3-ae16-5e1d42097425","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53344","PortSpecifier":{"PortValue":53344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"457ad418-51f0-4be3-ae16-5e1d42097425","method":"GET","path":"/maas-api/v1/api-keys/4b5557da-39c2-4fa9-9679-300a92c50dfc","host":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"457ad418-51f0-4be3-ae16-5e1d42097425","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53344","PortSpecifier":{"PortValue":53344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051287,"nanos":316345142},"http":{"id":"457ad418-51f0-4be3-ae16-5e1d42097425","method":"GET","headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4b5557da-39c2-4fa9-9679-300a92c50dfc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"457ad418-51f0-4be3-ae16-5e1d42097425","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"457ad418-51f0-4be3-ae16-5e1d42097425","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"457ad418-51f0-4be3-ae16-5e1d42097425","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4b5557da-39c2-4fa9-9679-300a92c50dfc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"457ad418-51f0-4be3-ae16-5e1d42097425","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"457ad418-51f0-4be3-ae16-5e1d42097425","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"457ad418-51f0-4be3-ae16-5e1d42097425","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-df3dc5/auth-test-model-df3dc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-df3dc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"457ad418-51f0-4be3-ae16-5e1d42097425","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"457ad418-51f0-4be3-ae16-5e1d42097425","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"457ad418-51f0-4be3-ae16-5e1d42097425","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"457ad418-51f0-4be3-ae16-5e1d42097425","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"457ad418-51f0-4be3-ae16-5e1d42097425","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"724909d0-2ac2-45d9-8f84-76eea4ea8c74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60244","PortSpecifier":{"PortValue":60244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"724909d0-2ac2-45d9-8f84-76eea4ea8c74","method":"GET","path":"/maas-api/v1/api-keys/4b5557da-39c2-4fa9-9679-300a92c50dfc","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"724909d0-2ac2-45d9-8f84-76eea4ea8c74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60244","PortSpecifier":{"PortValue":60244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051287,"nanos":352384952},"http":{"id":"724909d0-2ac2-45d9-8f84-76eea4ea8c74","method":"GET","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4b5557da-39c2-4fa9-9679-300a92c50dfc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"724909d0-2ac2-45d9-8f84-76eea4ea8c74","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"724909d0-2ac2-45d9-8f84-76eea4ea8c74","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"724909d0-2ac2-45d9-8f84-76eea4ea8c74","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4b5557da-39c2-4fa9-9679-300a92c50dfc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"724909d0-2ac2-45d9-8f84-76eea4ea8c74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"724909d0-2ac2-45d9-8f84-76eea4ea8c74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"724909d0-2ac2-45d9-8f84-76eea4ea8c74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/auth-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"724909d0-2ac2-45d9-8f84-76eea4ea8c74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"724909d0-2ac2-45d9-8f84-76eea4ea8c74","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"724909d0-2ac2-45d9-8f84-76eea4ea8c74","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"724909d0-2ac2-45d9-8f84-76eea4ea8c74","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:48:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"724909d0-2ac2-45d9-8f84-76eea4ea8c74","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06105a8f-ddc4-41ba-ba5c-4a2620faae38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50464","PortSpecifier":{"PortValue":50464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06105a8f-ddc4-41ba-ba5c-4a2620faae38","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06105a8f-ddc4-41ba-ba5c-4a2620faae38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50464","PortSpecifier":{"PortValue":50464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051304,"nanos":610335538},"http":{"id":"06105a8f-ddc4-41ba-ba5c-4a2620faae38","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06105a8f-ddc4-41ba-ba5c-4a2620faae38","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06105a8f-ddc4-41ba-ba5c-4a2620faae38","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06105a8f-ddc4-41ba-ba5c-4a2620faae38","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06105a8f-ddc4-41ba-ba5c-4a2620faae38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06105a8f-ddc4-41ba-ba5c-4a2620faae38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06105a8f-ddc4-41ba-ba5c-4a2620faae38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/auth-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06105a8f-ddc4-41ba-ba5c-4a2620faae38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06105a8f-ddc4-41ba-ba5c-4a2620faae38","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06105a8f-ddc4-41ba-ba5c-4a2620faae38","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06105a8f-ddc4-41ba-ba5c-4a2620faae38","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06105a8f-ddc4-41ba-ba5c-4a2620faae38","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"056a645f-29f0-4862-bca6-3abbddba4e6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36854","PortSpecifier":{"PortValue":36854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"056a645f-29f0-4862-bca6-3abbddba4e6b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"056a645f-29f0-4862-bca6-3abbddba4e6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36854","PortSpecifier":{"PortValue":36854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051304,"nanos":646793666},"http":{"id":"056a645f-29f0-4862-bca6-3abbddba4e6b","method":"POST","headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"056a645f-29f0-4862-bca6-3abbddba4e6b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"056a645f-29f0-4862-bca6-3abbddba4e6b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"056a645f-29f0-4862-bca6-3abbddba4e6b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"056a645f-29f0-4862-bca6-3abbddba4e6b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"056a645f-29f0-4862-bca6-3abbddba4e6b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"056a645f-29f0-4862-bca6-3abbddba4e6b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-df3dc5/auth-test-model-df3dc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-df3dc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"056a645f-29f0-4862-bca6-3abbddba4e6b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"056a645f-29f0-4862-bca6-3abbddba4e6b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"056a645f-29f0-4862-bca6-3abbddba4e6b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"056a645f-29f0-4862-bca6-3abbddba4e6b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"056a645f-29f0-4862-bca6-3abbddba4e6b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13fd6e7b-987f-4eb8-9a06-2876a943d09c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50476","PortSpecifier":{"PortValue":50476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13fd6e7b-987f-4eb8-9a06-2876a943d09c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13fd6e7b-987f-4eb8-9a06-2876a943d09c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50476","PortSpecifier":{"PortValue":50476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051304,"nanos":681693105},"http":{"id":"13fd6e7b-987f-4eb8-9a06-2876a943d09c","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13fd6e7b-987f-4eb8-9a06-2876a943d09c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JYr6feDKh6YuAoUx_ipPwOCkLLvTrevCqOGrxMnp0ieNbz2YNxqxrUXlQc2l"} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13fd6e7b-987f-4eb8-9a06-2876a943d09c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JYr6feDKh6YuAoUx_ipPwOCkLLvTrevCqOGrxMnp0ieNbz2YNxqxrUXlQc2l\"}"} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13fd6e7b-987f-4eb8-9a06-2876a943d09c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a06bf45-03b0-4582-95a1-6d1237aa1de3","keyName":"e2e-auth-iso-a-8100cd","subscription":"e2e-auth-iso-d58afb","tenant":"e2e-shared-a-246d80","userId":"8a06bf45-03b0-4582-95a1-6d1237aa1de3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13fd6e7b-987f-4eb8-9a06-2876a943d09c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13fd6e7b-987f-4eb8-9a06-2876a943d09c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13fd6e7b-987f-4eb8-9a06-2876a943d09c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13fd6e7b-987f-4eb8-9a06-2876a943d09c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/auth-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"13fd6e7b-987f-4eb8-9a06-2876a943d09c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13fd6e7b-987f-4eb8-9a06-2876a943d09c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13fd6e7b-987f-4eb8-9a06-2876a943d09c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13fd6e7b-987f-4eb8-9a06-2876a943d09c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d58afb"} {"level":"info","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13fd6e7b-987f-4eb8-9a06-2876a943d09c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:48:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13fd6e7b-987f-4eb8-9a06-2876a943d09c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72e17e873f1c74c46bd847ca71d9a5f444d50f7d6e9fd3f335b9a948d6929ac3"} {"level":"info","ts":"2026-07-14T17:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a5b135619d66c9e25871bd4cf8d21fb754fa0cf25eab97f8282c81f3b823962"} {"level":"info","ts":"2026-07-14T17:48:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43ad1fc3cf9cb3d3082719cdb9c4155e359ef7f385148e3470fafb76c67a71f6"} {"level":"info","ts":"2026-07-14T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/458ed801154ec77cec4db9b5cc5643dbeb911b357cc24bbbd7c9b29d1f4dd4f6"} {"level":"info","ts":"2026-07-14T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/190cba0b883ae792048a2d0dc0ca64342f9f5ff386d9acdd6f5a556ea0fe6533"} {"level":"info","ts":"2026-07-14T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a712f16456ca9b0c197102dace73d69b39ca4d87203dcdc06c522d69b7543adb"} {"level":"info","ts":"2026-07-14T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2b224861635b23e636d0f54722de08339a735caa56870e48786a3847ca773e6"} {"level":"info","ts":"2026-07-14T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b833e28e1af4b1b97c992fca2cfb74dbcf574a87a1d53b45ba832665f03659da"} {"level":"info","ts":"2026-07-14T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b308d4266cc202e1e5685cf81b6e9e5a6ec854ff9b25818d2a3d7058c46d737"} {"level":"info","ts":"2026-07-14T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49fa93425c8cf8ac1caa702695d8f7ba1cb9044924e73a1ade20c5f04c014ef1"} {"level":"info","ts":"2026-07-14T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4af3228d8c8d4a061aaf61bd30741b4e6a47a2a296be098f123a8a4e59ecfce1"} {"level":"info","ts":"2026-07-14T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f958184cb5bd05e08a9751aff1741eefe3678e768d951f0eaf423e1c9c9438ce"} {"level":"info","ts":"2026-07-14T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d5a12576fd4e2e05341d3dc43fcad84c74b7eaa6be782fbdc895d98c0cc10ed"} {"level":"info","ts":"2026-07-14T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd0c2bc28005d1f54a4b39c569501dfe277ba1e7d7a984c57c7662ccb74bc90c"} {"level":"info","ts":"2026-07-14T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9e83da5d422686ebcd5355b40a8d9fc75296653a3ce80332db3e303bdbab8d6"} {"level":"info","ts":"2026-07-14T17:48:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c84dffed7d4cbede496b96e302833053263daf540cd0c860a31a09d9bb45ea39"} {"level":"debug","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e"} {"level":"debug","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e"} {"level":"debug","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e"} {"level":"debug","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e"} {"level":"debug","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3"} {"level":"error","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680"} {"level":"error","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680"} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc73aacf9d9c32a29e3d9ba1eefd74b4b4ecc11320a7a298424bf3ce3e63cd3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc73aacf9d9c32a29e3d9ba1eefd74b4b4ecc11320a7a298424bf3ce3e63cd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc73aacf9d9c32a29e3d9ba1eefd74b4b4ecc11320a7a298424bf3ce3e63cd3c"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc73aacf9d9c32a29e3d9ba1eefd74b4b4ecc11320a7a298424bf3ce3e63cd3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc73aacf9d9c32a29e3d9ba1eefd74b4b4ecc11320a7a298424bf3ce3e63cd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc73aacf9d9c32a29e3d9ba1eefd74b4b4ecc11320a7a298424bf3ce3e63cd3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc73aacf9d9c32a29e3d9ba1eefd74b4b4ecc11320a7a298424bf3ce3e63cd3c"} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc73aacf9d9c32a29e3d9ba1eefd74b4b4ecc11320a7a298424bf3ce3e63cd3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc73aacf9d9c32a29e3d9ba1eefd74b4b4ecc11320a7a298424bf3ce3e63cd3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc73aacf9d9c32a29e3d9ba1eefd74b4b4ecc11320a7a298424bf3ce3e63cd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc73aacf9d9c32a29e3d9ba1eefd74b4b4ecc11320a7a298424bf3ce3e63cd3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680"} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc73aacf9d9c32a29e3d9ba1eefd74b4b4ecc11320a7a298424bf3ce3e63cd3c"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"} {"level":"error","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16ba224279bcb8a45f9773f3beb2b7d4511f89eb4ee7e8c7e1a75a1874739272","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16ba224279bcb8a45f9773f3beb2b7d4511f89eb4ee7e8c7e1a75a1874739272","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16ba224279bcb8a45f9773f3beb2b7d4511f89eb4ee7e8c7e1a75a1874739272","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ba224279bcb8a45f9773f3beb2b7d4511f89eb4ee7e8c7e1a75a1874739272"} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16ba224279bcb8a45f9773f3beb2b7d4511f89eb4ee7e8c7e1a75a1874739272","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16ba224279bcb8a45f9773f3beb2b7d4511f89eb4ee7e8c7e1a75a1874739272","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ba224279bcb8a45f9773f3beb2b7d4511f89eb4ee7e8c7e1a75a1874739272"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16ba224279bcb8a45f9773f3beb2b7d4511f89eb4ee7e8c7e1a75a1874739272","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16ba224279bcb8a45f9773f3beb2b7d4511f89eb4ee7e8c7e1a75a1874739272"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16ba224279bcb8a45f9773f3beb2b7d4511f89eb4ee7e8c7e1a75a1874739272","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16ba224279bcb8a45f9773f3beb2b7d4511f89eb4ee7e8c7e1a75a1874739272","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ba224279bcb8a45f9773f3beb2b7d4511f89eb4ee7e8c7e1a75a1874739272"} {"level":"info","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537"} {"level":"info","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"} {"level":"info","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537"} {"level":"info","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:48:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:48:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"} {"level":"info","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:48:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:48:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537"} {"level":"info","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"} {"level":"error","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:48:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf7fa3706776df90f1ba63f774f662cf93621ab079a499e4670e63b4093b8a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf7fa3706776df90f1ba63f774f662cf93621ab079a499e4670e63b4093b8a0"} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf7fa3706776df90f1ba63f774f662cf93621ab079a499e4670e63b4093b8a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf7fa3706776df90f1ba63f774f662cf93621ab079a499e4670e63b4093b8a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf7fa3706776df90f1ba63f774f662cf93621ab079a499e4670e63b4093b8a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf7fa3706776df90f1ba63f774f662cf93621ab079a499e4670e63b4093b8a0"} {"level":"error","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaf7fa3706776df90f1ba63f774f662cf93621ab079a499e4670e63b4093b8a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaf7fa3706776df90f1ba63f774f662cf93621ab079a499e4670e63b4093b8a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaf7fa3706776df90f1ba63f774f662cf93621ab079a499e4670e63b4093b8a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf7fa3706776df90f1ba63f774f662cf93621ab079a499e4670e63b4093b8a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf7fa3706776df90f1ba63f774f662cf93621ab079a499e4670e63b4093b8a0"} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"debug","ts":"2026-07-14T17:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c"} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c"} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c"} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c"} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c"} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eb3b04900254569a24ed28a408ace81a182d96c7a27b9ea7c09263e7e1157ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eb3b04900254569a24ed28a408ace81a182d96c7a27b9ea7c09263e7e1157ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eb3b04900254569a24ed28a408ace81a182d96c7a27b9ea7c09263e7e1157ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eb3b04900254569a24ed28a408ace81a182d96c7a27b9ea7c09263e7e1157ce"} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eb3b04900254569a24ed28a408ace81a182d96c7a27b9ea7c09263e7e1157ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eb3b04900254569a24ed28a408ace81a182d96c7a27b9ea7c09263e7e1157ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eb3b04900254569a24ed28a408ace81a182d96c7a27b9ea7c09263e7e1157ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eb3b04900254569a24ed28a408ace81a182d96c7a27b9ea7c09263e7e1157ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eb3b04900254569a24ed28a408ace81a182d96c7a27b9ea7c09263e7e1157ce"} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef"} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef"} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa80cdfec86040cbf620bd4d869dcc2cd4d81bba4462df4b723641e7f686a22f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa80cdfec86040cbf620bd4d869dcc2cd4d81bba4462df4b723641e7f686a22f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa80cdfec86040cbf620bd4d869dcc2cd4d81bba4462df4b723641e7f686a22f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa80cdfec86040cbf620bd4d869dcc2cd4d81bba4462df4b723641e7f686a22f"} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa80cdfec86040cbf620bd4d869dcc2cd4d81bba4462df4b723641e7f686a22f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef"} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa80cdfec86040cbf620bd4d869dcc2cd4d81bba4462df4b723641e7f686a22f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa80cdfec86040cbf620bd4d869dcc2cd4d81bba4462df4b723641e7f686a22f"} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa80cdfec86040cbf620bd4d869dcc2cd4d81bba4462df4b723641e7f686a22f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa80cdfec86040cbf620bd4d869dcc2cd4d81bba4462df4b723641e7f686a22f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef"} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa80cdfec86040cbf620bd4d869dcc2cd4d81bba4462df4b723641e7f686a22f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770"} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa80cdfec86040cbf620bd4d869dcc2cd4d81bba4462df4b723641e7f686a22f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef"} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa80cdfec86040cbf620bd4d869dcc2cd4d81bba4462df4b723641e7f686a22f"} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770"} {"level":"info","ts":"2026-07-14T17:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef"} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c"} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c"} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c"} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e"} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e"} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e"} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c"} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680"} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eb3b04900254569a24ed28a408ace81a182d96c7a27b9ea7c09263e7e1157ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"} {"level":"debug","ts":"2026-07-14T17:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eb3b04900254569a24ed28a408ace81a182d96c7a27b9ea7c09263e7e1157ce"} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c8cb9d4a8075ca6c0bbf23504b150b9178970eff1720d70c982c1db6e2873f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c8cb9d4a8075ca6c0bbf23504b150b9178970eff1720d70c982c1db6e2873f4"} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc73aacf9d9c32a29e3d9ba1eefd74b4b4ecc11320a7a298424bf3ce3e63cd3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc73aacf9d9c32a29e3d9ba1eefd74b4b4ecc11320a7a298424bf3ce3e63cd3c"} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef"} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaf7fa3706776df90f1ba63f774f662cf93621ab079a499e4670e63b4093b8a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:49:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa80cdfec86040cbf620bd4d869dcc2cd4d81bba4462df4b723641e7f686a22f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1521971129ea436e350f0d94a7ea07efe8a44d1e33200ba073b194314d328c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16ba224279bcb8a45f9773f3beb2b7d4511f89eb4ee7e8c7e1a75a1874739272","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaf7fa3706776df90f1ba63f774f662cf93621ab079a499e4670e63b4093b8a0"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa80cdfec86040cbf620bd4d869dcc2cd4d81bba4462df4b723641e7f686a22f"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1521971129ea436e350f0d94a7ea07efe8a44d1e33200ba073b194314d328c4"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ba224279bcb8a45f9773f3beb2b7d4511f89eb4ee7e8c7e1a75a1874739272"} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d06ba1ecdc79e11f078806bb5aab3053d820b16adf819ed3d4790df0d0876a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537"} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3"} {"level":"info","ts":"2026-07-14T17:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d06ba1ecdc79e11f078806bb5aab3053d820b16adf819ed3d4790df0d0876a6"} {"level":"info","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"926a43d0-4023-40ed-85d8-30e1450e6fc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46524","PortSpecifier":{"PortValue":46524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"926a43d0-4023-40ed-85d8-30e1450e6fc1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"926a43d0-4023-40ed-85d8-30e1450e6fc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46524","PortSpecifier":{"PortValue":46524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051378,"nanos":678449102},"http":{"id":"926a43d0-4023-40ed-85d8-30e1450e6fc1","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"926a43d0-4023-40ed-85d8-30e1450e6fc1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"926a43d0-4023-40ed-85d8-30e1450e6fc1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"926a43d0-4023-40ed-85d8-30e1450e6fc1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"926a43d0-4023-40ed-85d8-30e1450e6fc1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"926a43d0-4023-40ed-85d8-30e1450e6fc1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"926a43d0-4023-40ed-85d8-30e1450e6fc1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/sub-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"926a43d0-4023-40ed-85d8-30e1450e6fc1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"926a43d0-4023-40ed-85d8-30e1450e6fc1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"926a43d0-4023-40ed-85d8-30e1450e6fc1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"926a43d0-4023-40ed-85d8-30e1450e6fc1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"926a43d0-4023-40ed-85d8-30e1450e6fc1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e6b6d28-48d4-4f6b-b69f-4a432ab19e74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36524","PortSpecifier":{"PortValue":36524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e6b6d28-48d4-4f6b-b69f-4a432ab19e74","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e6b6d28-48d4-4f6b-b69f-4a432ab19e74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36524","PortSpecifier":{"PortValue":36524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051378,"nanos":727528641},"http":{"id":"7e6b6d28-48d4-4f6b-b69f-4a432ab19e74","method":"POST","headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e6b6d28-48d4-4f6b-b69f-4a432ab19e74","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e6b6d28-48d4-4f6b-b69f-4a432ab19e74","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e6b6d28-48d4-4f6b-b69f-4a432ab19e74","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e6b6d28-48d4-4f6b-b69f-4a432ab19e74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e6b6d28-48d4-4f6b-b69f-4a432ab19e74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e6b6d28-48d4-4f6b-b69f-4a432ab19e74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-df3dc5/sub-test-model-df3dc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-df3dc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e6b6d28-48d4-4f6b-b69f-4a432ab19e74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e6b6d28-48d4-4f6b-b69f-4a432ab19e74","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e6b6d28-48d4-4f6b-b69f-4a432ab19e74","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e6b6d28-48d4-4f6b-b69f-4a432ab19e74","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e6b6d28-48d4-4f6b-b69f-4a432ab19e74","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a29f5fb4-a0fa-47b0-8726-e75b700aedb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46534","PortSpecifier":{"PortValue":46534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a29f5fb4-a0fa-47b0-8726-e75b700aedb5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a29f5fb4-a0fa-47b0-8726-e75b700aedb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46534","PortSpecifier":{"PortValue":46534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051378,"nanos":771463316},"http":{"id":"a29f5fb4-a0fa-47b0-8726-e75b700aedb5","method":"GET","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a29f5fb4-a0fa-47b0-8726-e75b700aedb5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SgtMQyg7MNAN1U4d_VCYJ1cPZ48epWEEdTS7en9uequllyBJASzPt3PGyrIe"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a29f5fb4-a0fa-47b0-8726-e75b700aedb5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SgtMQyg7MNAN1U4d_VCYJ1cPZ48epWEEdTS7en9uequllyBJASzPt3PGyrIe\"}"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a29f5fb4-a0fa-47b0-8726-e75b700aedb5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e364ccc2-fbb7-482d-99e2-88df3f326b30","keyName":"e2e-sub-iso-4f7dd2","subscription":"e2e-a-only-017d86","tenant":"e2e-shared-a-246d80","userId":"e364ccc2-fbb7-482d-99e2-88df3f326b30","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a29f5fb4-a0fa-47b0-8726-e75b700aedb5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a29f5fb4-a0fa-47b0-8726-e75b700aedb5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a29f5fb4-a0fa-47b0-8726-e75b700aedb5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a29f5fb4-a0fa-47b0-8726-e75b700aedb5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/sub-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a29f5fb4-a0fa-47b0-8726-e75b700aedb5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a29f5fb4-a0fa-47b0-8726-e75b700aedb5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a29f5fb4-a0fa-47b0-8726-e75b700aedb5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-017d86"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a29f5fb4-a0fa-47b0-8726-e75b700aedb5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a29f5fb4-a0fa-47b0-8726-e75b700aedb5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a29f5fb4-a0fa-47b0-8726-e75b700aedb5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"068c8fbd-6c9e-4c9a-94f0-410727779752","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36540","PortSpecifier":{"PortValue":36540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"068c8fbd-6c9e-4c9a-94f0-410727779752","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"068c8fbd-6c9e-4c9a-94f0-410727779752","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36540","PortSpecifier":{"PortValue":36540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051378,"nanos":818423625},"http":{"id":"068c8fbd-6c9e-4c9a-94f0-410727779752","method":"GET","headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"068c8fbd-6c9e-4c9a-94f0-410727779752","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NHF16zNRHjNbDrT_2zsSH9MAe046ESltlPXotHiFxGYCFNGZzyfPWGGqggV"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"068c8fbd-6c9e-4c9a-94f0-410727779752","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-df3dc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NHF16zNRHjNbDrT_2zsSH9MAe046ESltlPXotHiFxGYCFNGZzyfPWGGqggV\"}"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"068c8fbd-6c9e-4c9a-94f0-410727779752","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-df3dc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"389c2178-3305-44f8-ad82-d156e446d371","keyName":"e2e-sub-iso-60906c","subscription":"e2e-b-only-017d86","tenant":"e2e-shared-b-df3dc5","userId":"389c2178-3305-44f8-ad82-d156e446d371","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"068c8fbd-6c9e-4c9a-94f0-410727779752","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"068c8fbd-6c9e-4c9a-94f0-410727779752","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"068c8fbd-6c9e-4c9a-94f0-410727779752","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"068c8fbd-6c9e-4c9a-94f0-410727779752","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-df3dc5/sub-test-model-df3dc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-df3dc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"068c8fbd-6c9e-4c9a-94f0-410727779752","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"068c8fbd-6c9e-4c9a-94f0-410727779752","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"068c8fbd-6c9e-4c9a-94f0-410727779752","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-017d86"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"068c8fbd-6c9e-4c9a-94f0-410727779752","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"068c8fbd-6c9e-4c9a-94f0-410727779752","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:49:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"068c8fbd-6c9e-4c9a-94f0-410727779752","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22817f0e-7bda-48e7-ba9d-39d51f715218","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58550","PortSpecifier":{"PortValue":58550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22817f0e-7bda-48e7-ba9d-39d51f715218","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22817f0e-7bda-48e7-ba9d-39d51f715218","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58550","PortSpecifier":{"PortValue":58550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051388,"nanos":804262269},"http":{"id":"22817f0e-7bda-48e7-ba9d-39d51f715218","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"22817f0e-7bda-48e7-ba9d-39d51f715218","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22817f0e-7bda-48e7-ba9d-39d51f715218","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22817f0e-7bda-48e7-ba9d-39d51f715218","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22817f0e-7bda-48e7-ba9d-39d51f715218","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22817f0e-7bda-48e7-ba9d-39d51f715218","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22817f0e-7bda-48e7-ba9d-39d51f715218","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/sub-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"22817f0e-7bda-48e7-ba9d-39d51f715218","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22817f0e-7bda-48e7-ba9d-39d51f715218","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22817f0e-7bda-48e7-ba9d-39d51f715218","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22817f0e-7bda-48e7-ba9d-39d51f715218","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22817f0e-7bda-48e7-ba9d-39d51f715218","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac10490a-d88b-4bc2-92dc-639d655842a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46570","PortSpecifier":{"PortValue":46570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ac10490a-d88b-4bc2-92dc-639d655842a2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac10490a-d88b-4bc2-92dc-639d655842a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46570","PortSpecifier":{"PortValue":46570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051388,"nanos":841435571},"http":{"id":"ac10490a-d88b-4bc2-92dc-639d655842a2","method":"POST","headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ac10490a-d88b-4bc2-92dc-639d655842a2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac10490a-d88b-4bc2-92dc-639d655842a2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac10490a-d88b-4bc2-92dc-639d655842a2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac10490a-d88b-4bc2-92dc-639d655842a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac10490a-d88b-4bc2-92dc-639d655842a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac10490a-d88b-4bc2-92dc-639d655842a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-df3dc5/sub-test-model-df3dc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-df3dc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ac10490a-d88b-4bc2-92dc-639d655842a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac10490a-d88b-4bc2-92dc-639d655842a2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac10490a-d88b-4bc2-92dc-639d655842a2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac10490a-d88b-4bc2-92dc-639d655842a2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac10490a-d88b-4bc2-92dc-639d655842a2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e9e983b-b177-44aa-90a7-288cfb2a6665","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58564","PortSpecifier":{"PortValue":58564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e9e983b-b177-44aa-90a7-288cfb2a6665","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e9e983b-b177-44aa-90a7-288cfb2a6665","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58564","PortSpecifier":{"PortValue":58564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051388,"nanos":884946892},"http":{"id":"9e9e983b-b177-44aa-90a7-288cfb2a6665","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e9e983b-b177-44aa-90a7-288cfb2a6665","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1byqNWLrtg38F2N6n_7XwYYFF9p5lsU99aEmEwnSNrmOe87OoG8MmGM9sU6i7"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e9e983b-b177-44aa-90a7-288cfb2a6665","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1byqNWLrtg38F2N6n_7XwYYFF9p5lsU99aEmEwnSNrmOe87OoG8MmGM9sU6i7\"}"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e9e983b-b177-44aa-90a7-288cfb2a6665","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f950cc22-af69-4490-a04f-8581bf810a3f","keyName":"e2e-sub-iso-a39088","subscription":"e2e-shared-sub-967036","tenant":"e2e-shared-a-246d80","userId":"f950cc22-af69-4490-a04f-8581bf810a3f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e9e983b-b177-44aa-90a7-288cfb2a6665","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e9e983b-b177-44aa-90a7-288cfb2a6665","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e9e983b-b177-44aa-90a7-288cfb2a6665","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e9e983b-b177-44aa-90a7-288cfb2a6665","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/sub-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e9e983b-b177-44aa-90a7-288cfb2a6665","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e9e983b-b177-44aa-90a7-288cfb2a6665","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e9e983b-b177-44aa-90a7-288cfb2a6665","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-967036"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e9e983b-b177-44aa-90a7-288cfb2a6665","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e9e983b-b177-44aa-90a7-288cfb2a6665","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e9e983b-b177-44aa-90a7-288cfb2a6665","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47d21dc1-f22e-4fdb-a4e1-887ee331fcbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46574","PortSpecifier":{"PortValue":46574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47d21dc1-f22e-4fdb-a4e1-887ee331fcbf","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47d21dc1-f22e-4fdb-a4e1-887ee331fcbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46574","PortSpecifier":{"PortValue":46574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051388,"nanos":917932852},"http":{"id":"47d21dc1-f22e-4fdb-a4e1-887ee331fcbf","method":"POST","headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47d21dc1-f22e-4fdb-a4e1-887ee331fcbf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RDoIRPoRed1XTxDm_rxW8j1XumFtahMyPQ19tbzQhNMoCkyhrU7HlKCNOGLf"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47d21dc1-f22e-4fdb-a4e1-887ee331fcbf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-df3dc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RDoIRPoRed1XTxDm_rxW8j1XumFtahMyPQ19tbzQhNMoCkyhrU7HlKCNOGLf\"}"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47d21dc1-f22e-4fdb-a4e1-887ee331fcbf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-df3dc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bfa5344b-6ecb-4dac-9203-6739bee589b2","keyName":"e2e-sub-iso-3cd8ea","subscription":"e2e-shared-sub-967036","tenant":"e2e-shared-b-df3dc5","userId":"bfa5344b-6ecb-4dac-9203-6739bee589b2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47d21dc1-f22e-4fdb-a4e1-887ee331fcbf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47d21dc1-f22e-4fdb-a4e1-887ee331fcbf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47d21dc1-f22e-4fdb-a4e1-887ee331fcbf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47d21dc1-f22e-4fdb-a4e1-887ee331fcbf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-df3dc5/sub-test-model-df3dc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-df3dc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47d21dc1-f22e-4fdb-a4e1-887ee331fcbf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47d21dc1-f22e-4fdb-a4e1-887ee331fcbf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47d21dc1-f22e-4fdb-a4e1-887ee331fcbf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-967036"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47d21dc1-f22e-4fdb-a4e1-887ee331fcbf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47d21dc1-f22e-4fdb-a4e1-887ee331fcbf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:49:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47d21dc1-f22e-4fdb-a4e1-887ee331fcbf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14697ad9269e31d6c44aee3cdfb4c761bce68b2ad97c18500f93362a7b6cd537"} {"level":"info","ts":"2026-07-14T17:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaf7fa3706776df90f1ba63f774f662cf93621ab079a499e4670e63b4093b8a0"} {"level":"info","ts":"2026-07-14T17:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f860131f13eada9abecc4be765ef242fb54856fc4a1b4697b2b68555abd07d38"} {"level":"info","ts":"2026-07-14T17:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1f15d08f96d4404b4be17c78e62dd4f86468231beb6d4b298a8f415a2293770"} {"level":"info","ts":"2026-07-14T17:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b17e268a2a071879c57999f8bc9c15fbadcb8de8fc5392751c8591aeaf28d6c"} {"level":"info","ts":"2026-07-14T17:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc73aacf9d9c32a29e3d9ba1eefd74b4b4ecc11320a7a298424bf3ce3e63cd3c"} {"level":"info","ts":"2026-07-14T17:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6eb3b04900254569a24ed28a408ace81a182d96c7a27b9ea7c09263e7e1157ce"} {"level":"info","ts":"2026-07-14T17:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98c69846c9a661679285fda2c21f3c07fbd656c40b8cd7c376844cc6e13a5ece"} {"level":"info","ts":"2026-07-14T17:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c7b36cf31cdd6bc0489d8db06bc41f1ebe70ccfa3d081eb2aef2ba716af15c3"} {"level":"info","ts":"2026-07-14T17:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89a574fe5c68d3fde4940f529133f870d1e35d7cbadf9ee7b553eb0027724680"} {"level":"info","ts":"2026-07-14T17:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd797fde2defc46ca6384ece7faed1ba44a9e06c591bc4c4fb9a4401254fea4e"} {"level":"info","ts":"2026-07-14T17:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16ba224279bcb8a45f9773f3beb2b7d4511f89eb4ee7e8c7e1a75a1874739272"} {"level":"info","ts":"2026-07-14T17:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56980db37046cea998c23ca34e46d4e908a5d6d08a7fb1233796b73daa1843ef"} {"level":"info","ts":"2026-07-14T17:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08e53be2fb25ea922463d16fcea9bc38f91173ab675ef7cde64db193bb172b12"} {"level":"info","ts":"2026-07-14T17:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09fdc8f2cac03a4cde4bafdb86a4bb78e5385abb23f1f68bf844f8a1d5ecd599"} {"level":"info","ts":"2026-07-14T17:49:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa80cdfec86040cbf620bd4d869dcc2cd4d81bba4462df4b723641e7f686a22f"} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2"} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2"} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2"} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2"} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2"} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2"} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2"} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2"} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c"} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c"} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c"} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c"} {"level":"debug","ts":"2026-07-14T17:50:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fa812fbd58e52dae6228c3cd15569251ea53c520c95b92e72bcd790a69d4b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fa812fbd58e52dae6228c3cd15569251ea53c520c95b92e72bcd790a69d4b6"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fa812fbd58e52dae6228c3cd15569251ea53c520c95b92e72bcd790a69d4b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fa812fbd58e52dae6228c3cd15569251ea53c520c95b92e72bcd790a69d4b6"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35fa812fbd58e52dae6228c3cd15569251ea53c520c95b92e72bcd790a69d4b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35fa812fbd58e52dae6228c3cd15569251ea53c520c95b92e72bcd790a69d4b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35fa812fbd58e52dae6228c3cd15569251ea53c520c95b92e72bcd790a69d4b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fa812fbd58e52dae6228c3cd15569251ea53c520c95b92e72bcd790a69d4b6"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35fa812fbd58e52dae6228c3cd15569251ea53c520c95b92e72bcd790a69d4b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"} {"level":"error","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c"} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c"} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"976ae636155e471b11a707a685b74bfadaeb7e97851ebe68741b5c086de6549f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"976ae636155e471b11a707a685b74bfadaeb7e97851ebe68741b5c086de6549f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"976ae636155e471b11a707a685b74bfadaeb7e97851ebe68741b5c086de6549f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"976ae636155e471b11a707a685b74bfadaeb7e97851ebe68741b5c086de6549f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976ae636155e471b11a707a685b74bfadaeb7e97851ebe68741b5c086de6549f"} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"976ae636155e471b11a707a685b74bfadaeb7e97851ebe68741b5c086de6549f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976ae636155e471b11a707a685b74bfadaeb7e97851ebe68741b5c086de6549f"} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"976ae636155e471b11a707a685b74bfadaeb7e97851ebe68741b5c086de6549f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["976ae636155e471b11a707a685b74bfadaeb7e97851ebe68741b5c086de6549f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"976ae636155e471b11a707a685b74bfadaeb7e97851ebe68741b5c086de6549f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"976ae636155e471b11a707a685b74bfadaeb7e97851ebe68741b5c086de6549f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976ae636155e471b11a707a685b74bfadaeb7e97851ebe68741b5c086de6549f"} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0"} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0"} {"level":"error","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0"} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0"} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"} {"level":"error","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76"} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76"} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76"} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bc808900768b74411cc60edc4cc7f0694861c1c1544dfb1ce45ab36e617429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad"} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bc808900768b74411cc60edc4cc7f0694861c1c1544dfb1ce45ab36e617429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76"} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bc808900768b74411cc60edc4cc7f0694861c1c1544dfb1ce45ab36e617429"} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bc808900768b74411cc60edc4cc7f0694861c1c1544dfb1ce45ab36e617429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2bc808900768b74411cc60edc4cc7f0694861c1c1544dfb1ce45ab36e617429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bc808900768b74411cc60edc4cc7f0694861c1c1544dfb1ce45ab36e617429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad"} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bc808900768b74411cc60edc4cc7f0694861c1c1544dfb1ce45ab36e617429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bc808900768b74411cc60edc4cc7f0694861c1c1544dfb1ce45ab36e617429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bc808900768b74411cc60edc4cc7f0694861c1c1544dfb1ce45ab36e617429"} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a32263e6a4518a81426f253447e464f02d243487592501902e07f70dc1ca288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a32263e6a4518a81426f253447e464f02d243487592501902e07f70dc1ca288","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bc808900768b74411cc60edc4cc7f0694861c1c1544dfb1ce45ab36e617429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2bc808900768b74411cc60edc4cc7f0694861c1c1544dfb1ce45ab36e617429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bc808900768b74411cc60edc4cc7f0694861c1c1544dfb1ce45ab36e617429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a32263e6a4518a81426f253447e464f02d243487592501902e07f70dc1ca288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a32263e6a4518a81426f253447e464f02d243487592501902e07f70dc1ca288","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2bc808900768b74411cc60edc4cc7f0694861c1c1544dfb1ce45ab36e617429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a32263e6a4518a81426f253447e464f02d243487592501902e07f70dc1ca288"} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a32263e6a4518a81426f253447e464f02d243487592501902e07f70dc1ca288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a32263e6a4518a81426f253447e464f02d243487592501902e07f70dc1ca288"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bc808900768b74411cc60edc4cc7f0694861c1c1544dfb1ce45ab36e617429"} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a32263e6a4518a81426f253447e464f02d243487592501902e07f70dc1ca288","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a32263e6a4518a81426f253447e464f02d243487592501902e07f70dc1ca288","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a32263e6a4518a81426f253447e464f02d243487592501902e07f70dc1ca288"} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:50:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:50:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2bc808900768b74411cc60edc4cc7f0694861c1c1544dfb1ce45ab36e617429","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bc808900768b74411cc60edc4cc7f0694861c1c1544dfb1ce45ab36e617429"} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae"} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae"} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae"} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3"} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae"} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3"} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae"} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3"} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae"} {"level":"info","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c8cb9d4a8075ca6c0bbf23504b150b9178970eff1720d70c982c1db6e2873f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c8cb9d4a8075ca6c0bbf23504b150b9178970eff1720d70c982c1db6e2873f4"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c"} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d06ba1ecdc79e11f078806bb5aab3053d820b16adf819ed3d4790df0d0876a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d06ba1ecdc79e11f078806bb5aab3053d820b16adf819ed3d4790df0d0876a6"} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1521971129ea436e350f0d94a7ea07efe8a44d1e33200ba073b194314d328c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1521971129ea436e350f0d94a7ea07efe8a44d1e33200ba073b194314d328c4"} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a32263e6a4518a81426f253447e464f02d243487592501902e07f70dc1ca288","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a32263e6a4518a81426f253447e464f02d243487592501902e07f70dc1ca288"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad"} {"level":"info","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0"} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"} {"level":"error","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c"} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0"} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c"} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"976ae636155e471b11a707a685b74bfadaeb7e97851ebe68741b5c086de6549f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976ae636155e471b11a707a685b74bfadaeb7e97851ebe68741b5c086de6549f"} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b"} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35fa812fbd58e52dae6228c3cd15569251ea53c520c95b92e72bcd790a69d4b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35fa812fbd58e52dae6228c3cd15569251ea53c520c95b92e72bcd790a69d4b6"} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce11d948-e5dc-4264-bb00-04734b5049e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36756","PortSpecifier":{"PortValue":36756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce11d948-e5dc-4264-bb00-04734b5049e3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce11d948-e5dc-4264-bb00-04734b5049e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36756","PortSpecifier":{"PortValue":36756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051464,"nanos":740160788},"http":{"id":"ce11d948-e5dc-4264-bb00-04734b5049e3","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce11d948-e5dc-4264-bb00-04734b5049e3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce11d948-e5dc-4264-bb00-04734b5049e3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce11d948-e5dc-4264-bb00-04734b5049e3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce11d948-e5dc-4264-bb00-04734b5049e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce11d948-e5dc-4264-bb00-04734b5049e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce11d948-e5dc-4264-bb00-04734b5049e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce11d948-e5dc-4264-bb00-04734b5049e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce11d948-e5dc-4264-bb00-04734b5049e3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce11d948-e5dc-4264-bb00-04734b5049e3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce11d948-e5dc-4264-bb00-04734b5049e3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce11d948-e5dc-4264-bb00-04734b5049e3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9517e29e-0c83-4810-80ec-4bc504f91b5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53622","PortSpecifier":{"PortValue":53622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9517e29e-0c83-4810-80ec-4bc504f91b5e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9517e29e-0c83-4810-80ec-4bc504f91b5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53622","PortSpecifier":{"PortValue":53622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051464,"nanos":786338253},"http":{"id":"9517e29e-0c83-4810-80ec-4bc504f91b5e","method":"POST","headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9517e29e-0c83-4810-80ec-4bc504f91b5e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9517e29e-0c83-4810-80ec-4bc504f91b5e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9517e29e-0c83-4810-80ec-4bc504f91b5e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9517e29e-0c83-4810-80ec-4bc504f91b5e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9517e29e-0c83-4810-80ec-4bc504f91b5e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9517e29e-0c83-4810-80ec-4bc504f91b5e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-df3dc5/rate-test-model-df3dc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-df3dc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9517e29e-0c83-4810-80ec-4bc504f91b5e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9517e29e-0c83-4810-80ec-4bc504f91b5e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9517e29e-0c83-4810-80ec-4bc504f91b5e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9517e29e-0c83-4810-80ec-4bc504f91b5e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9517e29e-0c83-4810-80ec-4bc504f91b5e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36764","PortSpecifier":{"PortValue":36764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","method":"POST","path":"/ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80/v1/completions","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36764","PortSpecifier":{"PortValue":36764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051464,"nanos":833366409},"http":{"id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OIpHi7oAeel2jVBP_3t6nCKC2OIJh7Np29CwWx8iBYb8ClutyZX9cvZHyZym"} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OIpHi7oAeel2jVBP_3t6nCKC2OIJh7Np29CwWx8iBYb8ClutyZX9cvZHyZym\"}"} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2c4753b-0788-445e-95ed-102ae8bf8e92","keyName":"e2e-rate-a-c6b026","subscription":"e2e-rate-iso-a-c6b026","tenant":"e2e-shared-a-246d80","userId":"d2c4753b-0788-445e-95ed-102ae8bf8e92","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80\",\"requestedSubscription\":\"e2e-rate-iso-a-c6b026\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-246d80","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c6b026","namespace":"ai-tenant-e2e-shared-a-246d80","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c6b026"} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d2c4753b-0788-445e-95ed-102ae8bf8e92","keyName":"e2e-rate-a-c6b026","selected_subscription":"e2e-rate-iso-a-c6b026","selected_subscription_key":"ai-tenant-e2e-shared-a-246d80/e2e-rate-iso-a-c6b026@ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-246d80","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c6b026","namespace":"ai-tenant-e2e-shared-a-246d80","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:51:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f887143-9a2e-4934-8ba9-af68a7dec14c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33728","PortSpecifier":{"PortValue":33728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","method":"POST","path":"/ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80/v1/completions","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33728","PortSpecifier":{"PortValue":33728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051465,"nanos":897897676},"http":{"id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OIpHi7oAeel2jVBP_3t6nCKC2OIJh7Np29CwWx8iBYb8ClutyZX9cvZHyZym"} {"level":"debug","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OIpHi7oAeel2jVBP_3t6nCKC2OIJh7Np29CwWx8iBYb8ClutyZX9cvZHyZym\"}"} {"level":"debug","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2c4753b-0788-445e-95ed-102ae8bf8e92","keyName":"e2e-rate-a-c6b026","subscription":"e2e-rate-iso-a-c6b026","tenant":"e2e-shared-a-246d80","userId":"d2c4753b-0788-445e-95ed-102ae8bf8e92","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80\",\"requestedSubscription\":\"e2e-rate-iso-a-c6b026\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-246d80","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c6b026","namespace":"ai-tenant-e2e-shared-a-246d80","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c6b026"} {"level":"debug","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d2c4753b-0788-445e-95ed-102ae8bf8e92","keyName":"e2e-rate-a-c6b026","selected_subscription":"e2e-rate-iso-a-c6b026","selected_subscription_key":"ai-tenant-e2e-shared-a-246d80/e2e-rate-iso-a-c6b026@ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-246d80","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c6b026","namespace":"ai-tenant-e2e-shared-a-246d80","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:51:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a37b56e-b742-4e62-b66c-3d626ab0005d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33736","PortSpecifier":{"PortValue":33736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","method":"POST","path":"/ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80/v1/completions","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33736","PortSpecifier":{"PortValue":33736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051466,"nanos":935705844},"http":{"id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OIpHi7oAeel2jVBP_3t6nCKC2OIJh7Np29CwWx8iBYb8ClutyZX9cvZHyZym"} {"level":"debug","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OIpHi7oAeel2jVBP_3t6nCKC2OIJh7Np29CwWx8iBYb8ClutyZX9cvZHyZym\"}"} {"level":"debug","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2c4753b-0788-445e-95ed-102ae8bf8e92","keyName":"e2e-rate-a-c6b026","subscription":"e2e-rate-iso-a-c6b026","tenant":"e2e-shared-a-246d80","userId":"d2c4753b-0788-445e-95ed-102ae8bf8e92","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80\",\"requestedSubscription\":\"e2e-rate-iso-a-c6b026\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-246d80","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c6b026","namespace":"ai-tenant-e2e-shared-a-246d80","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c6b026"} {"level":"debug","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d2c4753b-0788-445e-95ed-102ae8bf8e92","keyName":"e2e-rate-a-c6b026","selected_subscription":"e2e-rate-iso-a-c6b026","selected_subscription_key":"ai-tenant-e2e-shared-a-246d80/e2e-rate-iso-a-c6b026@ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-246d80","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c6b026","namespace":"ai-tenant-e2e-shared-a-246d80","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:51:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3472c80b-4b76-4a79-b354-bc6d7e9d4579","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d76ff358-1ce3-408b-be9b-89ba5beee014","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41548","PortSpecifier":{"PortValue":41548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d76ff358-1ce3-408b-be9b-89ba5beee014","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d76ff358-1ce3-408b-be9b-89ba5beee014","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41548","PortSpecifier":{"PortValue":41548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051479,"nanos":913729532},"http":{"id":"d76ff358-1ce3-408b-be9b-89ba5beee014","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d76ff358-1ce3-408b-be9b-89ba5beee014","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d76ff358-1ce3-408b-be9b-89ba5beee014","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d76ff358-1ce3-408b-be9b-89ba5beee014","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d76ff358-1ce3-408b-be9b-89ba5beee014","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d76ff358-1ce3-408b-be9b-89ba5beee014","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d76ff358-1ce3-408b-be9b-89ba5beee014","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d76ff358-1ce3-408b-be9b-89ba5beee014","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d76ff358-1ce3-408b-be9b-89ba5beee014","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d76ff358-1ce3-408b-be9b-89ba5beee014","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d76ff358-1ce3-408b-be9b-89ba5beee014","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d76ff358-1ce3-408b-be9b-89ba5beee014","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"652c8f06-de82-4433-add0-f7709fe56d7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36856","PortSpecifier":{"PortValue":36856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"652c8f06-de82-4433-add0-f7709fe56d7c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"652c8f06-de82-4433-add0-f7709fe56d7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36856","PortSpecifier":{"PortValue":36856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051479,"nanos":955644315},"http":{"id":"652c8f06-de82-4433-add0-f7709fe56d7c","method":"POST","headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"652c8f06-de82-4433-add0-f7709fe56d7c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"652c8f06-de82-4433-add0-f7709fe56d7c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"]}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"652c8f06-de82-4433-add0-f7709fe56d7c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd2c74be35f6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3cf1d74f-fac4-4a83-93a5-34c1edccc06c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f32e82d-d7d5-484d-84f3-9a9bac014234","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"652c8f06-de82-4433-add0-f7709fe56d7c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"652c8f06-de82-4433-add0-f7709fe56d7c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"652c8f06-de82-4433-add0-f7709fe56d7c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-df3dc5/rate-test-model-df3dc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-df3dc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"652c8f06-de82-4433-add0-f7709fe56d7c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"652c8f06-de82-4433-add0-f7709fe56d7c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"652c8f06-de82-4433-add0-f7709fe56d7c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"652c8f06-de82-4433-add0-f7709fe56d7c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"652c8f06-de82-4433-add0-f7709fe56d7c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b64ccc7b-025e-4523-a275-82c907876f62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41562","PortSpecifier":{"PortValue":41562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b64ccc7b-025e-4523-a275-82c907876f62","method":"POST","path":"/ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80/v1/completions","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b64ccc7b-025e-4523-a275-82c907876f62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41562","PortSpecifier":{"PortValue":41562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051479,"nanos":990633563},"http":{"id":"b64ccc7b-025e-4523-a275-82c907876f62","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b64ccc7b-025e-4523-a275-82c907876f62","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15JAHsLRBLdbuOEDs_iSqHlgZ44Yjo2jzdjUYf7XJ5brTEKAGa5iR7hmScehk"} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b64ccc7b-025e-4523-a275-82c907876f62","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15JAHsLRBLdbuOEDs_iSqHlgZ44Yjo2jzdjUYf7XJ5brTEKAGa5iR7hmScehk\"}"} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b64ccc7b-025e-4523-a275-82c907876f62","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"538ffcd5-928f-4733-a5bc-580ffce3f4c6","keyName":"e2e-rate-a-816c48","subscription":"e2e-rate-iso-a-816c48","tenant":"e2e-shared-a-246d80","userId":"538ffcd5-928f-4733-a5bc-580ffce3f4c6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b64ccc7b-025e-4523-a275-82c907876f62","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80\",\"requestedSubscription\":\"e2e-rate-iso-a-816c48\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b64ccc7b-025e-4523-a275-82c907876f62","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-246d80","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-816c48","namespace":"ai-tenant-e2e-shared-a-246d80","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b64ccc7b-025e-4523-a275-82c907876f62","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b64ccc7b-025e-4523-a275-82c907876f62","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b64ccc7b-025e-4523-a275-82c907876f62","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b64ccc7b-025e-4523-a275-82c907876f62","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b64ccc7b-025e-4523-a275-82c907876f62","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b64ccc7b-025e-4523-a275-82c907876f62","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b64ccc7b-025e-4523-a275-82c907876f62","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-816c48"} {"level":"debug","ts":"2026-07-14T17:51:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b64ccc7b-025e-4523-a275-82c907876f62","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:51:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b64ccc7b-025e-4523-a275-82c907876f62","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"538ffcd5-928f-4733-a5bc-580ffce3f4c6","keyName":"e2e-rate-a-816c48","selected_subscription":"e2e-rate-iso-a-816c48","selected_subscription_key":"ai-tenant-e2e-shared-a-246d80/e2e-rate-iso-a-816c48@ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-246d80","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-816c48","namespace":"ai-tenant-e2e-shared-a-246d80","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T17:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b64ccc7b-025e-4523-a275-82c907876f62","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:51:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b64ccc7b-025e-4523-a275-82c907876f62","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41572","PortSpecifier":{"PortValue":41572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","method":"POST","path":"/ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80/v1/completions","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41572","PortSpecifier":{"PortValue":41572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051481,"nanos":30287181},"http":{"id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15JAHsLRBLdbuOEDs_iSqHlgZ44Yjo2jzdjUYf7XJ5brTEKAGa5iR7hmScehk"} {"level":"debug","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15JAHsLRBLdbuOEDs_iSqHlgZ44Yjo2jzdjUYf7XJ5brTEKAGa5iR7hmScehk\"}"} {"level":"debug","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"538ffcd5-928f-4733-a5bc-580ffce3f4c6","keyName":"e2e-rate-a-816c48","subscription":"e2e-rate-iso-a-816c48","tenant":"e2e-shared-a-246d80","userId":"538ffcd5-928f-4733-a5bc-580ffce3f4c6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80\",\"requestedSubscription\":\"e2e-rate-iso-a-816c48\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-246d80","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-816c48","namespace":"ai-tenant-e2e-shared-a-246d80","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-816c48"} {"level":"debug","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"538ffcd5-928f-4733-a5bc-580ffce3f4c6","keyName":"e2e-rate-a-816c48","selected_subscription":"e2e-rate-iso-a-816c48","selected_subscription_key":"ai-tenant-e2e-shared-a-246d80/e2e-rate-iso-a-816c48@ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-246d80","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-816c48","namespace":"ai-tenant-e2e-shared-a-246d80","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:51:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1ddfcd1-a1b8-4046-9606-b5b899be917f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41576","PortSpecifier":{"PortValue":41576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"584c90ec-22d0-4205-9031-7faacd7f697c","method":"POST","path":"/ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80/v1/completions","host":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41576","PortSpecifier":{"PortValue":41576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051482,"nanos":69056498},"http":{"id":"584c90ec-22d0-4205-9031-7faacd7f697c","method":"POST","headers":{":authority":"e2e-shared-a-246d80.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15JAHsLRBLdbuOEDs_iSqHlgZ44Yjo2jzdjUYf7XJ5brTEKAGa5iR7hmScehk"} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15JAHsLRBLdbuOEDs_iSqHlgZ44Yjo2jzdjUYf7XJ5brTEKAGa5iR7hmScehk\"}"} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"538ffcd5-928f-4733-a5bc-580ffce3f4c6","keyName":"e2e-rate-a-816c48","subscription":"e2e-rate-iso-a-816c48","tenant":"e2e-shared-a-246d80","userId":"538ffcd5-928f-4733-a5bc-580ffce3f4c6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80\",\"requestedSubscription\":\"e2e-rate-iso-a-816c48\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-246d80.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-246d80","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-816c48","namespace":"ai-tenant-e2e-shared-a-246d80","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-246d80/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-816c48"} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"538ffcd5-928f-4733-a5bc-580ffce3f4c6","keyName":"e2e-rate-a-816c48","selected_subscription":"e2e-rate-iso-a-816c48","selected_subscription_key":"ai-tenant-e2e-shared-a-246d80/e2e-rate-iso-a-816c48@ai-tenant-e2e-shared-a-246d80/rate-test-model-246d80","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-246d80","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-816c48","namespace":"ai-tenant-e2e-shared-a-246d80","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"584c90ec-22d0-4205-9031-7faacd7f697c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36860","PortSpecifier":{"PortValue":36860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","method":"POST","path":"/ai-tenant-e2e-shared-b-df3dc5/rate-test-model-df3dc5/v1/completions","host":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36860","PortSpecifier":{"PortValue":36860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784051482,"nanos":106364981},"http":{"id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","method":"POST","headers":{":authority":"e2e-shared-b-df3dc5.apps.1ba15be1-6526-4f06-8001-fd2c74be35f6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-df3dc5/rate-test-model-df3dc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T5NuqOXYjJAeK3ne_VL9TU0gayLqPdhEn6OtnphrFcGulUgM987paTtmPmB4"} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-df3dc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T5NuqOXYjJAeK3ne_VL9TU0gayLqPdhEn6OtnphrFcGulUgM987paTtmPmB4\"}"} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-df3dc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"991d4a2d-7642-4b4e-a6d4-33894afbabc8","keyName":"e2e-rate-b-816c48","subscription":"e2e-rate-iso-b-816c48","tenant":"e2e-shared-b-df3dc5","userId":"991d4a2d-7642-4b4e-a6d4-33894afbabc8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-df3dc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-df3dc5/rate-test-model-df3dc5\",\"requestedSubscription\":\"e2e-rate-iso-b-816c48\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-df3dc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-df3dc5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-816c48","namespace":"ai-tenant-e2e-shared-b-df3dc5","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-df3dc5/rate-test-model-df3dc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-df3dc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-816c48"} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"991d4a2d-7642-4b4e-a6d4-33894afbabc8","keyName":"e2e-rate-b-816c48","selected_subscription":"e2e-rate-iso-b-816c48","selected_subscription_key":"ai-tenant-e2e-shared-b-df3dc5/e2e-rate-iso-b-816c48@ai-tenant-e2e-shared-b-df3dc5/rate-test-model-df3dc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-df3dc5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-816c48","namespace":"ai-tenant-e2e-shared-b-df3dc5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:51:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5eba9a33-4fd6-49f5-9274-00745d0fc1d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f998048ba9b40881f9ef8e3c74fed5773b327e19dc6fc497dfeab57dd44e5e0"} {"level":"info","ts":"2026-07-14T17:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f8311db9f9799c6951679f7d90e8a593175f7a542a5a6715b3eeba0c570a57e"} {"level":"info","ts":"2026-07-14T17:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6420d4445739da201ae29cc44144fe787bead1a11de40fd5aa54edc6aedddd4a"} {"level":"info","ts":"2026-07-14T17:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ee2d601ba1dd514f82cbdeb7b15d95528641b5ef9e194f3c558d1346ec8fb9a"} {"level":"info","ts":"2026-07-14T17:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2bc808900768b74411cc60edc4cc7f0694861c1c1544dfb1ce45ab36e617429"} {"level":"info","ts":"2026-07-14T17:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ecd4e109994a340498bd9ffc30a942b8773e4254fbb858ebfa463e6b91e550c"} {"level":"info","ts":"2026-07-14T17:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/976ae636155e471b11a707a685b74bfadaeb7e97851ebe68741b5c086de6549f"} {"level":"info","ts":"2026-07-14T17:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a8a1be4388895ff0aecf63eee0468e987821e9f5516992a0d3f38c928d19fbe"} {"level":"info","ts":"2026-07-14T17:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a32263e6a4518a81426f253447e464f02d243487592501902e07f70dc1ca288"} {"level":"info","ts":"2026-07-14T17:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68487e9edd618603fc1a48cc7185d7f332d109f469c18d1562b4c17d92e26c76"} {"level":"info","ts":"2026-07-14T17:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d4cd6dafb94d9cc35d4cf225bdc877061890ca24544a0da2e08eb66c2e9abad"} {"level":"info","ts":"2026-07-14T17:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c429c935ba804c3e117ec73e495c397783e98cd71d005c86fb028f4df9a4bce3"} {"level":"info","ts":"2026-07-14T17:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c3f8f3a11748f1720cff1d0dcc94b38d9e6c64c0bf4284de8bc754081dbc0d2"} {"level":"info","ts":"2026-07-14T17:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5822703f16e5412e2d9b223c63faf006cec23bfe9f448590b66a97794917110c"} {"level":"info","ts":"2026-07-14T17:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35fa812fbd58e52dae6228c3cd15569251ea53c520c95b92e72bcd790a69d4b6"} {"level":"info","ts":"2026-07-14T17:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/151217285c53cf2e44de8ee03e26e9f586f9a880a5181cfeb700fbc8e285022b"} {"level":"info","ts":"2026-07-14T17:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af68d9b9652a801a5c0d2d081699807f9985094058d56261919c4a66c2453eae"} {"level":"info","ts":"2026-07-14T17:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1521971129ea436e350f0d94a7ea07efe8a44d1e33200ba073b194314d328c4"} {"level":"info","ts":"2026-07-14T17:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b345fd3ddda6d3666f565212dcc51b392873bd290ae63f3502696f5a77806ca5"} {"level":"info","ts":"2026-07-14T17:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c8cb9d4a8075ca6c0bbf23504b150b9178970eff1720d70c982c1db6e2873f4"} {"level":"info","ts":"2026-07-14T17:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c3776c937788e0d185b25d230d0c83ea87cae30362e6ef75399c5a3c8dbfe7c"} {"level":"info","ts":"2026-07-14T17:52:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a61a26cd0560f4b4db9343fd67fe768a5eed68f186bac147e1e87ff6b3e3c3f6"} {"level":"info","ts":"2026-07-14T17:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cb869de360a29c3402bc72e8505e24d0bbd859330b38a9d2f6b11f50d0d7c2b"} {"level":"info","ts":"2026-07-14T17:52:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d06ba1ecdc79e11f078806bb5aab3053d820b16adf819ed3d4790df0d0876a6"}