--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"} {"level":"info","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e39b783133d4853182e8a9309ba8b64f4755917c75cdafb166886cd57171cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dabecddb38e992d38e644c6fd9ddd9755236840f467356122ecf645bf49d2883","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e39b783133d4853182e8a9309ba8b64f4755917c75cdafb166886cd57171cee"} {"level":"info","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e39b783133d4853182e8a9309ba8b64f4755917c75cdafb166886cd57171cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"} {"level":"info","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"} {"level":"debug","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"} {"level":"info","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"} {"level":"info","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"} {"level":"error","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233544783fe646826aa41d6f4ab57520a6894b5cdcce61afae591a1a2fe218c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233544783fe646826aa41d6f4ab57520a6894b5cdcce61afae591a1a2fe218c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233544783fe646826aa41d6f4ab57520a6894b5cdcce61afae591a1a2fe218c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233544783fe646826aa41d6f4ab57520a6894b5cdcce61afae591a1a2fe218c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233544783fe646826aa41d6f4ab57520a6894b5cdcce61afae591a1a2fe218c8"} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233544783fe646826aa41d6f4ab57520a6894b5cdcce61afae591a1a2fe218c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233544783fe646826aa41d6f4ab57520a6894b5cdcce61afae591a1a2fe218c8"} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233544783fe646826aa41d6f4ab57520a6894b5cdcce61afae591a1a2fe218c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["233544783fe646826aa41d6f4ab57520a6894b5cdcce61afae591a1a2fe218c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233544783fe646826aa41d6f4ab57520a6894b5cdcce61afae591a1a2fe218c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233544783fe646826aa41d6f4ab57520a6894b5cdcce61afae591a1a2fe218c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233544783fe646826aa41d6f4ab57520a6894b5cdcce61afae591a1a2fe218c8"} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31128aacdbd3f8f96902bf75bb8f2456f84ee809238001b4c2b927e48af00b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31128aacdbd3f8f96902bf75bb8f2456f84ee809238001b4c2b927e48af00b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31128aacdbd3f8f96902bf75bb8f2456f84ee809238001b4c2b927e48af00b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31128aacdbd3f8f96902bf75bb8f2456f84ee809238001b4c2b927e48af00b89"} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31128aacdbd3f8f96902bf75bb8f2456f84ee809238001b4c2b927e48af00b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31128aacdbd3f8f96902bf75bb8f2456f84ee809238001b4c2b927e48af00b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31128aacdbd3f8f96902bf75bb8f2456f84ee809238001b4c2b927e48af00b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31128aacdbd3f8f96902bf75bb8f2456f84ee809238001b4c2b927e48af00b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31128aacdbd3f8f96902bf75bb8f2456f84ee809238001b4c2b927e48af00b89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31128aacdbd3f8f96902bf75bb8f2456f84ee809238001b4c2b927e48af00b89"} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884"} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884"} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7"} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7"} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884"} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7"} {"level":"error","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7"} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04"} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04"} {"level":"info","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7"} {"level":"debug","ts":"2026-07-10T02:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04"} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f"} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04"} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f"} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04"} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04"} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f"} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"} {"level":"error","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04"} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f"} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4396479b96e6c35565a6dd96eb1957d8847e8452ac5c0be34e0bf603b4aec3b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4396479b96e6c35565a6dd96eb1957d8847e8452ac5c0be34e0bf603b4aec3b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4396479b96e6c35565a6dd96eb1957d8847e8452ac5c0be34e0bf603b4aec3b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4396479b96e6c35565a6dd96eb1957d8847e8452ac5c0be34e0bf603b4aec3b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4396479b96e6c35565a6dd96eb1957d8847e8452ac5c0be34e0bf603b4aec3b5"} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4396479b96e6c35565a6dd96eb1957d8847e8452ac5c0be34e0bf603b4aec3b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4396479b96e6c35565a6dd96eb1957d8847e8452ac5c0be34e0bf603b4aec3b5"} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4396479b96e6c35565a6dd96eb1957d8847e8452ac5c0be34e0bf603b4aec3b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4396479b96e6c35565a6dd96eb1957d8847e8452ac5c0be34e0bf603b4aec3b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4396479b96e6c35565a6dd96eb1957d8847e8452ac5c0be34e0bf603b4aec3b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4396479b96e6c35565a6dd96eb1957d8847e8452ac5c0be34e0bf603b4aec3b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48d3560bc5f965cd812cbefdea05e3b08aca1d4e1c41c1cd4aee147ee0ce233d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48d3560bc5f965cd812cbefdea05e3b08aca1d4e1c41c1cd4aee147ee0ce233d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48d3560bc5f965cd812cbefdea05e3b08aca1d4e1c41c1cd4aee147ee0ce233d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4396479b96e6c35565a6dd96eb1957d8847e8452ac5c0be34e0bf603b4aec3b5"} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48d3560bc5f965cd812cbefdea05e3b08aca1d4e1c41c1cd4aee147ee0ce233d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48d3560bc5f965cd812cbefdea05e3b08aca1d4e1c41c1cd4aee147ee0ce233d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48d3560bc5f965cd812cbefdea05e3b08aca1d4e1c41c1cd4aee147ee0ce233d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48d3560bc5f965cd812cbefdea05e3b08aca1d4e1c41c1cd4aee147ee0ce233d"} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48d3560bc5f965cd812cbefdea05e3b08aca1d4e1c41c1cd4aee147ee0ce233d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48d3560bc5f965cd812cbefdea05e3b08aca1d4e1c41c1cd4aee147ee0ce233d"} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25f2d17dca3bedb80d5f514a99bc36675a89ce41a205a81f69596c0bab8fe99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25f2d17dca3bedb80d5f514a99bc36675a89ce41a205a81f69596c0bab8fe99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25f2d17dca3bedb80d5f514a99bc36675a89ce41a205a81f69596c0bab8fe99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25f2d17dca3bedb80d5f514a99bc36675a89ce41a205a81f69596c0bab8fe99","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25f2d17dca3bedb80d5f514a99bc36675a89ce41a205a81f69596c0bab8fe99"} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48d3560bc5f965cd812cbefdea05e3b08aca1d4e1c41c1cd4aee147ee0ce233d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48d3560bc5f965cd812cbefdea05e3b08aca1d4e1c41c1cd4aee147ee0ce233d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48d3560bc5f965cd812cbefdea05e3b08aca1d4e1c41c1cd4aee147ee0ce233d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25f2d17dca3bedb80d5f514a99bc36675a89ce41a205a81f69596c0bab8fe99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48d3560bc5f965cd812cbefdea05e3b08aca1d4e1c41c1cd4aee147ee0ce233d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25f2d17dca3bedb80d5f514a99bc36675a89ce41a205a81f69596c0bab8fe99"} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48d3560bc5f965cd812cbefdea05e3b08aca1d4e1c41c1cd4aee147ee0ce233d"} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25f2d17dca3bedb80d5f514a99bc36675a89ce41a205a81f69596c0bab8fe99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d25f2d17dca3bedb80d5f514a99bc36675a89ce41a205a81f69596c0bab8fe99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25f2d17dca3bedb80d5f514a99bc36675a89ce41a205a81f69596c0bab8fe99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25f2d17dca3bedb80d5f514a99bc36675a89ce41a205a81f69596c0bab8fe99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25f2d17dca3bedb80d5f514a99bc36675a89ce41a205a81f69596c0bab8fe99"} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:49:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:49:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"info","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b7f81a7-8699-4e3a-bafc-94e50247e453","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:43136","PortSpecifier":{"PortValue":43136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b7f81a7-8699-4e3a-bafc-94e50247e453","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b7f81a7-8699-4e3a-bafc-94e50247e453","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:43136","PortSpecifier":{"PortValue":43136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651782,"nanos":120320335},"http":{"id":"8b7f81a7-8699-4e3a-bafc-94e50247e453","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8b7f81a7-8699-4e3a-bafc-94e50247e453","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b7f81a7-8699-4e3a-bafc-94e50247e453","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b7f81a7-8699-4e3a-bafc-94e50247e453","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b7f81a7-8699-4e3a-bafc-94e50247e453","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b7f81a7-8699-4e3a-bafc-94e50247e453","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b7f81a7-8699-4e3a-bafc-94e50247e453","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/auth-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b7f81a7-8699-4e3a-bafc-94e50247e453","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b7f81a7-8699-4e3a-bafc-94e50247e453","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b7f81a7-8699-4e3a-bafc-94e50247e453","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b7f81a7-8699-4e3a-bafc-94e50247e453","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b7f81a7-8699-4e3a-bafc-94e50247e453","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6730a79-f973-40cc-a86b-b6e13d4d9d30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51274","PortSpecifier":{"PortValue":51274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6730a79-f973-40cc-a86b-b6e13d4d9d30","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6730a79-f973-40cc-a86b-b6e13d4d9d30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51274","PortSpecifier":{"PortValue":51274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651782,"nanos":181277990},"http":{"id":"c6730a79-f973-40cc-a86b-b6e13d4d9d30","method":"POST","headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c6730a79-f973-40cc-a86b-b6e13d4d9d30","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6730a79-f973-40cc-a86b-b6e13d4d9d30","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6730a79-f973-40cc-a86b-b6e13d4d9d30","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6730a79-f973-40cc-a86b-b6e13d4d9d30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6730a79-f973-40cc-a86b-b6e13d4d9d30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6730a79-f973-40cc-a86b-b6e13d4d9d30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e812a4/auth-test-model-e812a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c6730a79-f973-40cc-a86b-b6e13d4d9d30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6730a79-f973-40cc-a86b-b6e13d4d9d30","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6730a79-f973-40cc-a86b-b6e13d4d9d30","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6730a79-f973-40cc-a86b-b6e13d4d9d30","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6730a79-f973-40cc-a86b-b6e13d4d9d30","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2f9f4eb-586c-4bdb-8627-ba58d6d5a4a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:43150","PortSpecifier":{"PortValue":43150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2f9f4eb-586c-4bdb-8627-ba58d6d5a4a5","method":"GET","path":"/maas-api/v1/api-keys/6e7d587f-c5d5-4ab2-b577-401d47ae5825","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2f9f4eb-586c-4bdb-8627-ba58d6d5a4a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:43150","PortSpecifier":{"PortValue":43150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651782,"nanos":243431967},"http":{"id":"a2f9f4eb-586c-4bdb-8627-ba58d6d5a4a5","method":"GET","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6e7d587f-c5d5-4ab2-b577-401d47ae5825",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a2f9f4eb-586c-4bdb-8627-ba58d6d5a4a5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2f9f4eb-586c-4bdb-8627-ba58d6d5a4a5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2f9f4eb-586c-4bdb-8627-ba58d6d5a4a5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6e7d587f-c5d5-4ab2-b577-401d47ae5825",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2f9f4eb-586c-4bdb-8627-ba58d6d5a4a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2f9f4eb-586c-4bdb-8627-ba58d6d5a4a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2f9f4eb-586c-4bdb-8627-ba58d6d5a4a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/auth-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a2f9f4eb-586c-4bdb-8627-ba58d6d5a4a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2f9f4eb-586c-4bdb-8627-ba58d6d5a4a5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2f9f4eb-586c-4bdb-8627-ba58d6d5a4a5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2f9f4eb-586c-4bdb-8627-ba58d6d5a4a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2f9f4eb-586c-4bdb-8627-ba58d6d5a4a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9358bcd-ccb9-4a82-8ca5-7b37ba09e2d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51290","PortSpecifier":{"PortValue":51290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9358bcd-ccb9-4a82-8ca5-7b37ba09e2d7","method":"GET","path":"/maas-api/v1/api-keys/520b852e-4682-4a2c-af03-888003bca4f5","host":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9358bcd-ccb9-4a82-8ca5-7b37ba09e2d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51290","PortSpecifier":{"PortValue":51290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651782,"nanos":286064424},"http":{"id":"a9358bcd-ccb9-4a82-8ca5-7b37ba09e2d7","method":"GET","headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/520b852e-4682-4a2c-af03-888003bca4f5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a9358bcd-ccb9-4a82-8ca5-7b37ba09e2d7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9358bcd-ccb9-4a82-8ca5-7b37ba09e2d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9358bcd-ccb9-4a82-8ca5-7b37ba09e2d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/520b852e-4682-4a2c-af03-888003bca4f5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9358bcd-ccb9-4a82-8ca5-7b37ba09e2d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9358bcd-ccb9-4a82-8ca5-7b37ba09e2d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9358bcd-ccb9-4a82-8ca5-7b37ba09e2d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e812a4/auth-test-model-e812a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a9358bcd-ccb9-4a82-8ca5-7b37ba09e2d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9358bcd-ccb9-4a82-8ca5-7b37ba09e2d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9358bcd-ccb9-4a82-8ca5-7b37ba09e2d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9358bcd-ccb9-4a82-8ca5-7b37ba09e2d7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:49:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9358bcd-ccb9-4a82-8ca5-7b37ba09e2d7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b15067c-172c-4cf4-880d-6bb4074d0006","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51996","PortSpecifier":{"PortValue":51996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b15067c-172c-4cf4-880d-6bb4074d0006","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b15067c-172c-4cf4-880d-6bb4074d0006","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:51996","PortSpecifier":{"PortValue":51996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651799,"nanos":552319066},"http":{"id":"9b15067c-172c-4cf4-880d-6bb4074d0006","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b15067c-172c-4cf4-880d-6bb4074d0006","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b15067c-172c-4cf4-880d-6bb4074d0006","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b15067c-172c-4cf4-880d-6bb4074d0006","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b15067c-172c-4cf4-880d-6bb4074d0006","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b15067c-172c-4cf4-880d-6bb4074d0006","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b15067c-172c-4cf4-880d-6bb4074d0006","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/auth-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b15067c-172c-4cf4-880d-6bb4074d0006","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b15067c-172c-4cf4-880d-6bb4074d0006","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b15067c-172c-4cf4-880d-6bb4074d0006","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b15067c-172c-4cf4-880d-6bb4074d0006","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b15067c-172c-4cf4-880d-6bb4074d0006","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83f1e386-2ff3-44bf-b06e-aab3cbc5620b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33862","PortSpecifier":{"PortValue":33862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83f1e386-2ff3-44bf-b06e-aab3cbc5620b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83f1e386-2ff3-44bf-b06e-aab3cbc5620b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33862","PortSpecifier":{"PortValue":33862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651799,"nanos":597212080},"http":{"id":"83f1e386-2ff3-44bf-b06e-aab3cbc5620b","method":"POST","headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83f1e386-2ff3-44bf-b06e-aab3cbc5620b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83f1e386-2ff3-44bf-b06e-aab3cbc5620b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83f1e386-2ff3-44bf-b06e-aab3cbc5620b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83f1e386-2ff3-44bf-b06e-aab3cbc5620b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83f1e386-2ff3-44bf-b06e-aab3cbc5620b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83f1e386-2ff3-44bf-b06e-aab3cbc5620b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e812a4/auth-test-model-e812a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"83f1e386-2ff3-44bf-b06e-aab3cbc5620b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83f1e386-2ff3-44bf-b06e-aab3cbc5620b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83f1e386-2ff3-44bf-b06e-aab3cbc5620b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83f1e386-2ff3-44bf-b06e-aab3cbc5620b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83f1e386-2ff3-44bf-b06e-aab3cbc5620b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02aa25b2-557e-420d-9a06-4f97b9c5f2f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52006","PortSpecifier":{"PortValue":52006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02aa25b2-557e-420d-9a06-4f97b9c5f2f2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02aa25b2-557e-420d-9a06-4f97b9c5f2f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52006","PortSpecifier":{"PortValue":52006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651799,"nanos":637962034},"http":{"id":"02aa25b2-557e-420d-9a06-4f97b9c5f2f2","method":"GET","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02aa25b2-557e-420d-9a06-4f97b9c5f2f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OkrjSjFCGIgzBNWL_Xii01tWMej9mGJRthzdu4wHf71hZyRZTnCduLSkTPZJ"} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02aa25b2-557e-420d-9a06-4f97b9c5f2f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OkrjSjFCGIgzBNWL_Xii01tWMej9mGJRthzdu4wHf71hZyRZTnCduLSkTPZJ\"}"} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02aa25b2-557e-420d-9a06-4f97b9c5f2f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a83876b7-724c-4d9f-9fd6-145a743c07f0","keyName":"e2e-auth-iso-a-cd4b7b","subscription":"e2e-auth-iso-a09fc9","tenant":"e2e-shared-a-e239ac","userId":"a83876b7-724c-4d9f-9fd6-145a743c07f0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02aa25b2-557e-420d-9a06-4f97b9c5f2f2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02aa25b2-557e-420d-9a06-4f97b9c5f2f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02aa25b2-557e-420d-9a06-4f97b9c5f2f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02aa25b2-557e-420d-9a06-4f97b9c5f2f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/auth-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02aa25b2-557e-420d-9a06-4f97b9c5f2f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02aa25b2-557e-420d-9a06-4f97b9c5f2f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a09fc9"} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"02aa25b2-557e-420d-9a06-4f97b9c5f2f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02aa25b2-557e-420d-9a06-4f97b9c5f2f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02aa25b2-557e-420d-9a06-4f97b9c5f2f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:49:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02aa25b2-557e-420d-9a06-4f97b9c5f2f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3e92cdf-3e7f-4bce-bc09-51ec32754676","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49098","PortSpecifier":{"PortValue":49098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3e92cdf-3e7f-4bce-bc09-51ec32754676","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3e92cdf-3e7f-4bce-bc09-51ec32754676","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49098","PortSpecifier":{"PortValue":49098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651819,"nanos":71717492},"http":{"id":"a3e92cdf-3e7f-4bce-bc09-51ec32754676","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a3e92cdf-3e7f-4bce-bc09-51ec32754676","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3e92cdf-3e7f-4bce-bc09-51ec32754676","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3e92cdf-3e7f-4bce-bc09-51ec32754676","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3e92cdf-3e7f-4bce-bc09-51ec32754676","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3e92cdf-3e7f-4bce-bc09-51ec32754676","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3e92cdf-3e7f-4bce-bc09-51ec32754676","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/auth-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a3e92cdf-3e7f-4bce-bc09-51ec32754676","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3e92cdf-3e7f-4bce-bc09-51ec32754676","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3e92cdf-3e7f-4bce-bc09-51ec32754676","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3e92cdf-3e7f-4bce-bc09-51ec32754676","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3e92cdf-3e7f-4bce-bc09-51ec32754676","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92f777b0-9c43-47f3-b1e1-77b7cef6a3b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:41972","PortSpecifier":{"PortValue":41972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92f777b0-9c43-47f3-b1e1-77b7cef6a3b7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92f777b0-9c43-47f3-b1e1-77b7cef6a3b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:41972","PortSpecifier":{"PortValue":41972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651819,"nanos":112483441},"http":{"id":"92f777b0-9c43-47f3-b1e1-77b7cef6a3b7","method":"POST","headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"92f777b0-9c43-47f3-b1e1-77b7cef6a3b7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92f777b0-9c43-47f3-b1e1-77b7cef6a3b7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92f777b0-9c43-47f3-b1e1-77b7cef6a3b7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92f777b0-9c43-47f3-b1e1-77b7cef6a3b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92f777b0-9c43-47f3-b1e1-77b7cef6a3b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92f777b0-9c43-47f3-b1e1-77b7cef6a3b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e812a4/auth-test-model-e812a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92f777b0-9c43-47f3-b1e1-77b7cef6a3b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92f777b0-9c43-47f3-b1e1-77b7cef6a3b7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92f777b0-9c43-47f3-b1e1-77b7cef6a3b7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92f777b0-9c43-47f3-b1e1-77b7cef6a3b7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92f777b0-9c43-47f3-b1e1-77b7cef6a3b7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c2797bc-a174-4f86-8e5d-f902068d9b26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:41984","PortSpecifier":{"PortValue":41984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c2797bc-a174-4f86-8e5d-f902068d9b26","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c2797bc-a174-4f86-8e5d-f902068d9b26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:41984","PortSpecifier":{"PortValue":41984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651819,"nanos":150058855},"http":{"id":"7c2797bc-a174-4f86-8e5d-f902068d9b26","method":"GET","headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c2797bc-a174-4f86-8e5d-f902068d9b26","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BrpPaGLsqgUwmui5_lQR90hpynKqlCOjKnXsKl1KDB3rAaLTemFANMAFpf4"} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c2797bc-a174-4f86-8e5d-f902068d9b26","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e812a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BrpPaGLsqgUwmui5_lQR90hpynKqlCOjKnXsKl1KDB3rAaLTemFANMAFpf4\"}"} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c2797bc-a174-4f86-8e5d-f902068d9b26","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e812a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c2797bc-a174-4f86-8e5d-f902068d9b26","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c2797bc-a174-4f86-8e5d-f902068d9b26","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"7c2797bc-a174-4f86-8e5d-f902068d9b26","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c2797bc-a174-4f86-8e5d-f902068d9b26","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-10T02:50:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c2797bc-a174-4f86-8e5d-f902068d9b26","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"718431ce-743c-4a9d-8bbf-1252a7ff98cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56500","PortSpecifier":{"PortValue":56500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"718431ce-743c-4a9d-8bbf-1252a7ff98cb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"718431ce-743c-4a9d-8bbf-1252a7ff98cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56500","PortSpecifier":{"PortValue":56500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651836,"nanos":438754390},"http":{"id":"718431ce-743c-4a9d-8bbf-1252a7ff98cb","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"718431ce-743c-4a9d-8bbf-1252a7ff98cb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"718431ce-743c-4a9d-8bbf-1252a7ff98cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"718431ce-743c-4a9d-8bbf-1252a7ff98cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"718431ce-743c-4a9d-8bbf-1252a7ff98cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"718431ce-743c-4a9d-8bbf-1252a7ff98cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"718431ce-743c-4a9d-8bbf-1252a7ff98cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/auth-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"718431ce-743c-4a9d-8bbf-1252a7ff98cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"718431ce-743c-4a9d-8bbf-1252a7ff98cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"718431ce-743c-4a9d-8bbf-1252a7ff98cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"718431ce-743c-4a9d-8bbf-1252a7ff98cb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"718431ce-743c-4a9d-8bbf-1252a7ff98cb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1048d094-69d9-4f56-bd65-f7a4e0050495","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57278","PortSpecifier":{"PortValue":57278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1048d094-69d9-4f56-bd65-f7a4e0050495","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1048d094-69d9-4f56-bd65-f7a4e0050495","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57278","PortSpecifier":{"PortValue":57278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651836,"nanos":475328644},"http":{"id":"1048d094-69d9-4f56-bd65-f7a4e0050495","method":"POST","headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1048d094-69d9-4f56-bd65-f7a4e0050495","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1048d094-69d9-4f56-bd65-f7a4e0050495","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1048d094-69d9-4f56-bd65-f7a4e0050495","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1048d094-69d9-4f56-bd65-f7a4e0050495","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1048d094-69d9-4f56-bd65-f7a4e0050495","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1048d094-69d9-4f56-bd65-f7a4e0050495","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e812a4/auth-test-model-e812a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1048d094-69d9-4f56-bd65-f7a4e0050495","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1048d094-69d9-4f56-bd65-f7a4e0050495","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1048d094-69d9-4f56-bd65-f7a4e0050495","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1048d094-69d9-4f56-bd65-f7a4e0050495","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1048d094-69d9-4f56-bd65-f7a4e0050495","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d69f9f43-0134-4104-9615-f461e363a487","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56508","PortSpecifier":{"PortValue":56508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d69f9f43-0134-4104-9615-f461e363a487","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d69f9f43-0134-4104-9615-f461e363a487","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56508","PortSpecifier":{"PortValue":56508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651836,"nanos":508627907},"http":{"id":"d69f9f43-0134-4104-9615-f461e363a487","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d69f9f43-0134-4104-9615-f461e363a487","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d69f9f43-0134-4104-9615-f461e363a487","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d69f9f43-0134-4104-9615-f461e363a487","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d69f9f43-0134-4104-9615-f461e363a487","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d69f9f43-0134-4104-9615-f461e363a487","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d69f9f43-0134-4104-9615-f461e363a487","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/auth-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d69f9f43-0134-4104-9615-f461e363a487","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d69f9f43-0134-4104-9615-f461e363a487","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d69f9f43-0134-4104-9615-f461e363a487","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d69f9f43-0134-4104-9615-f461e363a487","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d69f9f43-0134-4104-9615-f461e363a487","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"538e2f4f-b178-4aa3-991c-514d8bb94501","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57294","PortSpecifier":{"PortValue":57294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"538e2f4f-b178-4aa3-991c-514d8bb94501","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"538e2f4f-b178-4aa3-991c-514d8bb94501","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57294","PortSpecifier":{"PortValue":57294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651836,"nanos":548028898},"http":{"id":"538e2f4f-b178-4aa3-991c-514d8bb94501","method":"POST","headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"538e2f4f-b178-4aa3-991c-514d8bb94501","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"538e2f4f-b178-4aa3-991c-514d8bb94501","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"538e2f4f-b178-4aa3-991c-514d8bb94501","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"538e2f4f-b178-4aa3-991c-514d8bb94501","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"538e2f4f-b178-4aa3-991c-514d8bb94501","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"538e2f4f-b178-4aa3-991c-514d8bb94501","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e812a4/auth-test-model-e812a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"538e2f4f-b178-4aa3-991c-514d8bb94501","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"538e2f4f-b178-4aa3-991c-514d8bb94501","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"538e2f4f-b178-4aa3-991c-514d8bb94501","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"538e2f4f-b178-4aa3-991c-514d8bb94501","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"538e2f4f-b178-4aa3-991c-514d8bb94501","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:50:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8d674fb-655b-45ab-a17d-6766d58a09c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50210","PortSpecifier":{"PortValue":50210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8d674fb-655b-45ab-a17d-6766d58a09c3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:50:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8d674fb-655b-45ab-a17d-6766d58a09c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50210","PortSpecifier":{"PortValue":50210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651855,"nanos":984641390},"http":{"id":"f8d674fb-655b-45ab-a17d-6766d58a09c3","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f8d674fb-655b-45ab-a17d-6766d58a09c3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:50:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8d674fb-655b-45ab-a17d-6766d58a09c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8d674fb-655b-45ab-a17d-6766d58a09c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8d674fb-655b-45ab-a17d-6766d58a09c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8d674fb-655b-45ab-a17d-6766d58a09c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8d674fb-655b-45ab-a17d-6766d58a09c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/auth-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f8d674fb-655b-45ab-a17d-6766d58a09c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:50:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8d674fb-655b-45ab-a17d-6766d58a09c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:50:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8d674fb-655b-45ab-a17d-6766d58a09c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:50:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8d674fb-655b-45ab-a17d-6766d58a09c3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:50:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8d674fb-655b-45ab-a17d-6766d58a09c3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2014f4f8-0824-40c2-b86c-70225285aa67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:53630","PortSpecifier":{"PortValue":53630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2014f4f8-0824-40c2-b86c-70225285aa67","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2014f4f8-0824-40c2-b86c-70225285aa67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:53630","PortSpecifier":{"PortValue":53630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651856,"nanos":23980887},"http":{"id":"2014f4f8-0824-40c2-b86c-70225285aa67","method":"POST","headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2014f4f8-0824-40c2-b86c-70225285aa67","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2014f4f8-0824-40c2-b86c-70225285aa67","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2014f4f8-0824-40c2-b86c-70225285aa67","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2014f4f8-0824-40c2-b86c-70225285aa67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2014f4f8-0824-40c2-b86c-70225285aa67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2014f4f8-0824-40c2-b86c-70225285aa67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e812a4/auth-test-model-e812a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2014f4f8-0824-40c2-b86c-70225285aa67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2014f4f8-0824-40c2-b86c-70225285aa67","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2014f4f8-0824-40c2-b86c-70225285aa67","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2014f4f8-0824-40c2-b86c-70225285aa67","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2014f4f8-0824-40c2-b86c-70225285aa67","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5a41abe-b69c-45ad-b44e-46a9d2b4cc16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:53634","PortSpecifier":{"PortValue":53634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5a41abe-b69c-45ad-b44e-46a9d2b4cc16","method":"GET","path":"/maas-api/v1/api-keys/76a05a97-75c5-4413-96ea-dccc7177cfad","host":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5a41abe-b69c-45ad-b44e-46a9d2b4cc16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:53634","PortSpecifier":{"PortValue":53634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651856,"nanos":83532755},"http":{"id":"c5a41abe-b69c-45ad-b44e-46a9d2b4cc16","method":"GET","headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/76a05a97-75c5-4413-96ea-dccc7177cfad",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c5a41abe-b69c-45ad-b44e-46a9d2b4cc16","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5a41abe-b69c-45ad-b44e-46a9d2b4cc16","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5a41abe-b69c-45ad-b44e-46a9d2b4cc16","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/76a05a97-75c5-4413-96ea-dccc7177cfad",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5a41abe-b69c-45ad-b44e-46a9d2b4cc16","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5a41abe-b69c-45ad-b44e-46a9d2b4cc16","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5a41abe-b69c-45ad-b44e-46a9d2b4cc16","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e812a4/auth-test-model-e812a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5a41abe-b69c-45ad-b44e-46a9d2b4cc16","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5a41abe-b69c-45ad-b44e-46a9d2b4cc16","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5a41abe-b69c-45ad-b44e-46a9d2b4cc16","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5a41abe-b69c-45ad-b44e-46a9d2b4cc16","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5a41abe-b69c-45ad-b44e-46a9d2b4cc16","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b647e284-7e4a-417a-98d2-84afe85b855d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50212","PortSpecifier":{"PortValue":50212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b647e284-7e4a-417a-98d2-84afe85b855d","method":"GET","path":"/maas-api/v1/api-keys/76a05a97-75c5-4413-96ea-dccc7177cfad","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b647e284-7e4a-417a-98d2-84afe85b855d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50212","PortSpecifier":{"PortValue":50212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651856,"nanos":119320934},"http":{"id":"b647e284-7e4a-417a-98d2-84afe85b855d","method":"GET","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/76a05a97-75c5-4413-96ea-dccc7177cfad",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b647e284-7e4a-417a-98d2-84afe85b855d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b647e284-7e4a-417a-98d2-84afe85b855d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b647e284-7e4a-417a-98d2-84afe85b855d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/76a05a97-75c5-4413-96ea-dccc7177cfad",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b647e284-7e4a-417a-98d2-84afe85b855d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b647e284-7e4a-417a-98d2-84afe85b855d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b647e284-7e4a-417a-98d2-84afe85b855d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/auth-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b647e284-7e4a-417a-98d2-84afe85b855d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b647e284-7e4a-417a-98d2-84afe85b855d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b647e284-7e4a-417a-98d2-84afe85b855d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b647e284-7e4a-417a-98d2-84afe85b855d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:50:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b647e284-7e4a-417a-98d2-84afe85b855d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beb7bf76-0efc-4b80-9d9e-4cdf40f6ff20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39564","PortSpecifier":{"PortValue":39564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"beb7bf76-0efc-4b80-9d9e-4cdf40f6ff20","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beb7bf76-0efc-4b80-9d9e-4cdf40f6ff20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39564","PortSpecifier":{"PortValue":39564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651875,"nanos":523715952},"http":{"id":"beb7bf76-0efc-4b80-9d9e-4cdf40f6ff20","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"beb7bf76-0efc-4b80-9d9e-4cdf40f6ff20","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"beb7bf76-0efc-4b80-9d9e-4cdf40f6ff20","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"beb7bf76-0efc-4b80-9d9e-4cdf40f6ff20","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb7bf76-0efc-4b80-9d9e-4cdf40f6ff20","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb7bf76-0efc-4b80-9d9e-4cdf40f6ff20","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb7bf76-0efc-4b80-9d9e-4cdf40f6ff20","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/auth-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"beb7bf76-0efc-4b80-9d9e-4cdf40f6ff20","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb7bf76-0efc-4b80-9d9e-4cdf40f6ff20","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb7bf76-0efc-4b80-9d9e-4cdf40f6ff20","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beb7bf76-0efc-4b80-9d9e-4cdf40f6ff20","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beb7bf76-0efc-4b80-9d9e-4cdf40f6ff20","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e44ca944-6a2b-4f9c-9289-aa90edf406e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39844","PortSpecifier":{"PortValue":39844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e44ca944-6a2b-4f9c-9289-aa90edf406e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e44ca944-6a2b-4f9c-9289-aa90edf406e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39844","PortSpecifier":{"PortValue":39844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651875,"nanos":564115850},"http":{"id":"e44ca944-6a2b-4f9c-9289-aa90edf406e1","method":"POST","headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e44ca944-6a2b-4f9c-9289-aa90edf406e1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e44ca944-6a2b-4f9c-9289-aa90edf406e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e44ca944-6a2b-4f9c-9289-aa90edf406e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e44ca944-6a2b-4f9c-9289-aa90edf406e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e44ca944-6a2b-4f9c-9289-aa90edf406e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e44ca944-6a2b-4f9c-9289-aa90edf406e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e812a4/auth-test-model-e812a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e44ca944-6a2b-4f9c-9289-aa90edf406e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e44ca944-6a2b-4f9c-9289-aa90edf406e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e44ca944-6a2b-4f9c-9289-aa90edf406e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e44ca944-6a2b-4f9c-9289-aa90edf406e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e44ca944-6a2b-4f9c-9289-aa90edf406e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e2c5478-c967-4fe7-8fe9-7740c79f6d7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39576","PortSpecifier":{"PortValue":39576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e2c5478-c967-4fe7-8fe9-7740c79f6d7c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e2c5478-c967-4fe7-8fe9-7740c79f6d7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39576","PortSpecifier":{"PortValue":39576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651875,"nanos":607839957},"http":{"id":"0e2c5478-c967-4fe7-8fe9-7740c79f6d7c","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e2c5478-c967-4fe7-8fe9-7740c79f6d7c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XmfVQZ3VWqO6vvZp_pGWewY5nH1Bwjyd1CnASHRXHOj46xesXPUSRcNTBcNU"} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e2c5478-c967-4fe7-8fe9-7740c79f6d7c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XmfVQZ3VWqO6vvZp_pGWewY5nH1Bwjyd1CnASHRXHOj46xesXPUSRcNTBcNU\"}"} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e2c5478-c967-4fe7-8fe9-7740c79f6d7c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b75cd4f-d62e-471d-a84c-c73ae70a949b","keyName":"e2e-auth-iso-a-267b1e","subscription":"e2e-auth-iso-a61826","tenant":"e2e-shared-a-e239ac","userId":"8b75cd4f-d62e-471d-a84c-c73ae70a949b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e2c5478-c967-4fe7-8fe9-7740c79f6d7c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e2c5478-c967-4fe7-8fe9-7740c79f6d7c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e2c5478-c967-4fe7-8fe9-7740c79f6d7c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e2c5478-c967-4fe7-8fe9-7740c79f6d7c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/auth-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e2c5478-c967-4fe7-8fe9-7740c79f6d7c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e2c5478-c967-4fe7-8fe9-7740c79f6d7c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e2c5478-c967-4fe7-8fe9-7740c79f6d7c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a61826"} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e2c5478-c967-4fe7-8fe9-7740c79f6d7c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e2c5478-c967-4fe7-8fe9-7740c79f6d7c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:51:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e2c5478-c967-4fe7-8fe9-7740c79f6d7c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e39b783133d4853182e8a9309ba8b64f4755917c75cdafb166886cd57171cee"} {"level":"info","ts":"2026-07-10T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6e73a7507ef128b69dc09039216826700ed3669fe3b0578bf7adb1dac8d49df"} {"level":"info","ts":"2026-07-10T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54a5c0354e0eb3b68103b5acc94c79a12d815842fde867921618adf65b7d6ed9"} {"level":"info","ts":"2026-07-10T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7071d9e1eb1ab0b022ae2dcc12ccd1b94a501ddfd7c88a3e15c1b559482bf249"} {"level":"info","ts":"2026-07-10T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89e9d82b44be8df6190615128b9401c3fc5dd9659747bd9518f52229fc18c684"} {"level":"info","ts":"2026-07-10T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dabecddb38e992d38e644c6fd9ddd9755236840f467356122ecf645bf49d2883"} {"level":"info","ts":"2026-07-10T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6421963b1e3bce9fbef21732c81ecf5740aebce5e38a0b1518c27a06f4692a1"} {"level":"info","ts":"2026-07-10T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a56d4065b5b2345cc744d73bc636abf59c14f2ce50d17ceefb6485300a0cc656"} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6"} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6"} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6"} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6"} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6"} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6"} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7df9e240a58a1e81d9863a9e3046ac5d0f0636ce467ef8edcb64bba2422803d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6"} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7df9e240a58a1e81d9863a9e3046ac5d0f0636ce467ef8edcb64bba2422803d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7df9e240a58a1e81d9863a9e3046ac5d0f0636ce467ef8edcb64bba2422803d5"} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7df9e240a58a1e81d9863a9e3046ac5d0f0636ce467ef8edcb64bba2422803d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7df9e240a58a1e81d9863a9e3046ac5d0f0636ce467ef8edcb64bba2422803d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7df9e240a58a1e81d9863a9e3046ac5d0f0636ce467ef8edcb64bba2422803d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64"} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7df9e240a58a1e81d9863a9e3046ac5d0f0636ce467ef8edcb64bba2422803d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6"} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7df9e240a58a1e81d9863a9e3046ac5d0f0636ce467ef8edcb64bba2422803d5"} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64"} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824"} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824"} {"level":"debug","ts":"2026-07-10T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824"} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824"} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d33fc3f2c8bf87f07b0394ad3aae013333e61c43dda4c44e6f1ed1e47d654f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d33fc3f2c8bf87f07b0394ad3aae013333e61c43dda4c44e6f1ed1e47d654f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0633def732b8a8e90c9df6e8de0af75b67ef64cacabe35d387f1a4354ff9ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0633def732b8a8e90c9df6e8de0af75b67ef64cacabe35d387f1a4354ff9ca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d33fc3f2c8bf87f07b0394ad3aae013333e61c43dda4c44e6f1ed1e47d654f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0633def732b8a8e90c9df6e8de0af75b67ef64cacabe35d387f1a4354ff9ca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d33fc3f2c8bf87f07b0394ad3aae013333e61c43dda4c44e6f1ed1e47d654f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0633def732b8a8e90c9df6e8de0af75b67ef64cacabe35d387f1a4354ff9ca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d33fc3f2c8bf87f07b0394ad3aae013333e61c43dda4c44e6f1ed1e47d654f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824"} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0633def732b8a8e90c9df6e8de0af75b67ef64cacabe35d387f1a4354ff9ca2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d33fc3f2c8bf87f07b0394ad3aae013333e61c43dda4c44e6f1ed1e47d654f4"} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d33fc3f2c8bf87f07b0394ad3aae013333e61c43dda4c44e6f1ed1e47d654f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d33fc3f2c8bf87f07b0394ad3aae013333e61c43dda4c44e6f1ed1e47d654f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d33fc3f2c8bf87f07b0394ad3aae013333e61c43dda4c44e6f1ed1e47d654f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0633def732b8a8e90c9df6e8de0af75b67ef64cacabe35d387f1a4354ff9ca2"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0633def732b8a8e90c9df6e8de0af75b67ef64cacabe35d387f1a4354ff9ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0633def732b8a8e90c9df6e8de0af75b67ef64cacabe35d387f1a4354ff9ca2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0633def732b8a8e90c9df6e8de0af75b67ef64cacabe35d387f1a4354ff9ca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d33fc3f2c8bf87f07b0394ad3aae013333e61c43dda4c44e6f1ed1e47d654f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0633def732b8a8e90c9df6e8de0af75b67ef64cacabe35d387f1a4354ff9ca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455"} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:51:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d33fc3f2c8bf87f07b0394ad3aae013333e61c43dda4c44e6f1ed1e47d654f4"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0633def732b8a8e90c9df6e8de0af75b67ef64cacabe35d387f1a4354ff9ca2"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f558567e77e480d2241ee40c7d26abed2df53102ffe204dfd0991bb4364f671f"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48d3560bc5f965cd812cbefdea05e3b08aca1d4e1c41c1cd4aee147ee0ce233d"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d25f2d17dca3bedb80d5f514a99bc36675a89ce41a205a81f69596c0bab8fe99"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9a10a0fb16213887063bda619d376e3f1fd47f530efac957f43d5d4d550ba04"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff5f19df8ecdd6f05c8c6c3013b6cafa9c567e6fe45354530ceca4aa60fccca7"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6345682066faf79364d76e362c0bde716e1a2272797399406d82fca670402f8b"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/233544783fe646826aa41d6f4ab57520a6894b5cdcce61afae591a1a2fe218c8"} {"level":"info","ts":"2026-07-10T02:51:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31128aacdbd3f8f96902bf75bb8f2456f84ee809238001b4c2b927e48af00b89"} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ece1cb28360f409876e99dcbd7c193be887e897120db5e6c6da391143fa65705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ece1cb28360f409876e99dcbd7c193be887e897120db5e6c6da391143fa65705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ece1cb28360f409876e99dcbd7c193be887e897120db5e6c6da391143fa65705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ece1cb28360f409876e99dcbd7c193be887e897120db5e6c6da391143fa65705","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ece1cb28360f409876e99dcbd7c193be887e897120db5e6c6da391143fa65705"} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ece1cb28360f409876e99dcbd7c193be887e897120db5e6c6da391143fa65705","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ece1cb28360f409876e99dcbd7c193be887e897120db5e6c6da391143fa65705"} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ece1cb28360f409876e99dcbd7c193be887e897120db5e6c6da391143fa65705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ece1cb28360f409876e99dcbd7c193be887e897120db5e6c6da391143fa65705"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ece1cb28360f409876e99dcbd7c193be887e897120db5e6c6da391143fa65705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ece1cb28360f409876e99dcbd7c193be887e897120db5e6c6da391143fa65705","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ece1cb28360f409876e99dcbd7c193be887e897120db5e6c6da391143fa65705"} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da"} {"level":"error","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da"} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da"} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466"} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466"} {"level":"error","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466"} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"error","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466"} {"level":"info","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466"} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0260d22a9ca081480d50fd765b7efe64af53e903a1d2587f76a00f1014305e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0260d22a9ca081480d50fd765b7efe64af53e903a1d2587f76a00f1014305e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0260d22a9ca081480d50fd765b7efe64af53e903a1d2587f76a00f1014305e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0260d22a9ca081480d50fd765b7efe64af53e903a1d2587f76a00f1014305e5"} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0260d22a9ca081480d50fd765b7efe64af53e903a1d2587f76a00f1014305e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0260d22a9ca081480d50fd765b7efe64af53e903a1d2587f76a00f1014305e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0260d22a9ca081480d50fd765b7efe64af53e903a1d2587f76a00f1014305e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466"} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0260d22a9ca081480d50fd765b7efe64af53e903a1d2587f76a00f1014305e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0260d22a9ca081480d50fd765b7efe64af53e903a1d2587f76a00f1014305e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ec8db897258a5e454423280907bc792f17f857911780894cbb5ffcd46530896","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0260d22a9ca081480d50fd765b7efe64af53e903a1d2587f76a00f1014305e5"} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ec8db897258a5e454423280907bc792f17f857911780894cbb5ffcd46530896","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ec8db897258a5e454423280907bc792f17f857911780894cbb5ffcd46530896","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ec8db897258a5e454423280907bc792f17f857911780894cbb5ffcd46530896","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ec8db897258a5e454423280907bc792f17f857911780894cbb5ffcd46530896"} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ec8db897258a5e454423280907bc792f17f857911780894cbb5ffcd46530896","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ec8db897258a5e454423280907bc792f17f857911780894cbb5ffcd46530896","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ec8db897258a5e454423280907bc792f17f857911780894cbb5ffcd46530896"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ec8db897258a5e454423280907bc792f17f857911780894cbb5ffcd46530896","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ec8db897258a5e454423280907bc792f17f857911780894cbb5ffcd46530896"} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ec8db897258a5e454423280907bc792f17f857911780894cbb5ffcd46530896","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ec8db897258a5e454423280907bc792f17f857911780894cbb5ffcd46530896"} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2"} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2"} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2"} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2"} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2"} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2"} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2"} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18d1a8d3f6247ef2d6505c67c124c4833e7dcd2ec3f3661280fda10e4dc1892","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18d1a8d3f6247ef2d6505c67c124c4833e7dcd2ec3f3661280fda10e4dc1892"} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"debug","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455"} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884"} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0633def732b8a8e90c9df6e8de0af75b67ef64cacabe35d387f1a4354ff9ca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0633def732b8a8e90c9df6e8de0af75b67ef64cacabe35d387f1a4354ff9ca2"} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824"} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"debug","ts":"2026-07-10T02:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6"} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4396479b96e6c35565a6dd96eb1957d8847e8452ac5c0be34e0bf603b4aec3b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7df9e240a58a1e81d9863a9e3046ac5d0f0636ce467ef8edcb64bba2422803d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4396479b96e6c35565a6dd96eb1957d8847e8452ac5c0be34e0bf603b4aec3b5"} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7df9e240a58a1e81d9863a9e3046ac5d0f0636ce467ef8edcb64bba2422803d5"} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d33fc3f2c8bf87f07b0394ad3aae013333e61c43dda4c44e6f1ed1e47d654f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ece1cb28360f409876e99dcbd7c193be887e897120db5e6c6da391143fa65705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d33fc3f2c8bf87f07b0394ad3aae013333e61c43dda4c44e6f1ed1e47d654f4"} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ece1cb28360f409876e99dcbd7c193be887e897120db5e6c6da391143fa65705"} {"level":"error","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ec8db897258a5e454423280907bc792f17f857911780894cbb5ffcd46530896","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"error","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ec8db897258a5e454423280907bc792f17f857911780894cbb5ffcd46530896"} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:52:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2"} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0260d22a9ca081480d50fd765b7efe64af53e903a1d2587f76a00f1014305e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466"} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"debug","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0260d22a9ca081480d50fd765b7efe64af53e903a1d2587f76a00f1014305e5"} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6"} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da"} {"level":"info","ts":"2026-07-10T02:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64"} {"level":"info","ts":"2026-07-10T02:52:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc23a05a-52df-4915-bd81-d7e3cfe373af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33380","PortSpecifier":{"PortValue":33380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc23a05a-52df-4915-bd81-d7e3cfe373af","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:52:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc23a05a-52df-4915-bd81-d7e3cfe373af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33380","PortSpecifier":{"PortValue":33380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651956,"nanos":946385821},"http":{"id":"bc23a05a-52df-4915-bd81-d7e3cfe373af","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:52:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bc23a05a-52df-4915-bd81-d7e3cfe373af","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:52:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc23a05a-52df-4915-bd81-d7e3cfe373af","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:52:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc23a05a-52df-4915-bd81-d7e3cfe373af","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:52:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc23a05a-52df-4915-bd81-d7e3cfe373af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc23a05a-52df-4915-bd81-d7e3cfe373af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc23a05a-52df-4915-bd81-d7e3cfe373af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/sub-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc23a05a-52df-4915-bd81-d7e3cfe373af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:52:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc23a05a-52df-4915-bd81-d7e3cfe373af","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:52:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc23a05a-52df-4915-bd81-d7e3cfe373af","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:52:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc23a05a-52df-4915-bd81-d7e3cfe373af","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:52:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc23a05a-52df-4915-bd81-d7e3cfe373af","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:52:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9cc71d5-eae6-47e1-8bcb-415ab2a0b03c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42396","PortSpecifier":{"PortValue":42396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9cc71d5-eae6-47e1-8bcb-415ab2a0b03c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:52:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9cc71d5-eae6-47e1-8bcb-415ab2a0b03c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42396","PortSpecifier":{"PortValue":42396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651956,"nanos":994434458},"http":{"id":"e9cc71d5-eae6-47e1-8bcb-415ab2a0b03c","method":"POST","headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:52:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e9cc71d5-eae6-47e1-8bcb-415ab2a0b03c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9cc71d5-eae6-47e1-8bcb-415ab2a0b03c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9cc71d5-eae6-47e1-8bcb-415ab2a0b03c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9cc71d5-eae6-47e1-8bcb-415ab2a0b03c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9cc71d5-eae6-47e1-8bcb-415ab2a0b03c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9cc71d5-eae6-47e1-8bcb-415ab2a0b03c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e812a4/sub-test-model-e812a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9cc71d5-eae6-47e1-8bcb-415ab2a0b03c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9cc71d5-eae6-47e1-8bcb-415ab2a0b03c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9cc71d5-eae6-47e1-8bcb-415ab2a0b03c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9cc71d5-eae6-47e1-8bcb-415ab2a0b03c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9cc71d5-eae6-47e1-8bcb-415ab2a0b03c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7e72fde-cc2b-404a-8e5c-4b809a521202","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33382","PortSpecifier":{"PortValue":33382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7e72fde-cc2b-404a-8e5c-4b809a521202","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7e72fde-cc2b-404a-8e5c-4b809a521202","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33382","PortSpecifier":{"PortValue":33382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651957,"nanos":30306285},"http":{"id":"b7e72fde-cc2b-404a-8e5c-4b809a521202","method":"GET","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7e72fde-cc2b-404a-8e5c-4b809a521202","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16xhXPeDHZILKUj1z_p1glXpBra85gP61rXfbTSFoKaVLAvP2gYvHS96qt9Kj"} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b7e72fde-cc2b-404a-8e5c-4b809a521202","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16xhXPeDHZILKUj1z_p1glXpBra85gP61rXfbTSFoKaVLAvP2gYvHS96qt9Kj\"}"} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b7e72fde-cc2b-404a-8e5c-4b809a521202","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3f2c71eb-c5eb-465c-8bb5-39ee1410fbd5","keyName":"e2e-sub-iso-0be508","subscription":"e2e-a-only-f53068","tenant":"e2e-shared-a-e239ac","userId":"3f2c71eb-c5eb-465c-8bb5-39ee1410fbd5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7e72fde-cc2b-404a-8e5c-4b809a521202","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7e72fde-cc2b-404a-8e5c-4b809a521202","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7e72fde-cc2b-404a-8e5c-4b809a521202","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7e72fde-cc2b-404a-8e5c-4b809a521202","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/sub-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7e72fde-cc2b-404a-8e5c-4b809a521202","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7e72fde-cc2b-404a-8e5c-4b809a521202","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7e72fde-cc2b-404a-8e5c-4b809a521202","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-f53068"} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7e72fde-cc2b-404a-8e5c-4b809a521202","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7e72fde-cc2b-404a-8e5c-4b809a521202","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7e72fde-cc2b-404a-8e5c-4b809a521202","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2451279c-9fc2-476b-b23a-bfd80b50bd20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42408","PortSpecifier":{"PortValue":42408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2451279c-9fc2-476b-b23a-bfd80b50bd20","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2451279c-9fc2-476b-b23a-bfd80b50bd20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42408","PortSpecifier":{"PortValue":42408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651957,"nanos":72438065},"http":{"id":"2451279c-9fc2-476b-b23a-bfd80b50bd20","method":"GET","headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2451279c-9fc2-476b-b23a-bfd80b50bd20","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8wJcub8PkV56q1Ep_h5GMn4wmzFzOLu7G6Fh6Op2IIYILo5PsKCnIWER5Oyr"} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2451279c-9fc2-476b-b23a-bfd80b50bd20","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e812a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8wJcub8PkV56q1Ep_h5GMn4wmzFzOLu7G6Fh6Op2IIYILo5PsKCnIWER5Oyr\"}"} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2451279c-9fc2-476b-b23a-bfd80b50bd20","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e812a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"85ec3058-264b-449b-b72c-817e23ffa21a","keyName":"e2e-sub-iso-f2d3e7","subscription":"e2e-b-only-f53068","tenant":"e2e-shared-b-e812a4","userId":"85ec3058-264b-449b-b72c-817e23ffa21a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2451279c-9fc2-476b-b23a-bfd80b50bd20","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2451279c-9fc2-476b-b23a-bfd80b50bd20","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2451279c-9fc2-476b-b23a-bfd80b50bd20","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2451279c-9fc2-476b-b23a-bfd80b50bd20","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e812a4/sub-test-model-e812a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2451279c-9fc2-476b-b23a-bfd80b50bd20","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2451279c-9fc2-476b-b23a-bfd80b50bd20","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2451279c-9fc2-476b-b23a-bfd80b50bd20","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-f53068"} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2451279c-9fc2-476b-b23a-bfd80b50bd20","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2451279c-9fc2-476b-b23a-bfd80b50bd20","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:52:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2451279c-9fc2-476b-b23a-bfd80b50bd20","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f2f0b5d-cb0b-42a8-bd53-514a4e94b0a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39408","PortSpecifier":{"PortValue":39408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f2f0b5d-cb0b-42a8-bd53-514a4e94b0a7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f2f0b5d-cb0b-42a8-bd53-514a4e94b0a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39408","PortSpecifier":{"PortValue":39408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651971,"nanos":521166783},"http":{"id":"3f2f0b5d-cb0b-42a8-bd53-514a4e94b0a7","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f2f0b5d-cb0b-42a8-bd53-514a4e94b0a7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f2f0b5d-cb0b-42a8-bd53-514a4e94b0a7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f2f0b5d-cb0b-42a8-bd53-514a4e94b0a7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f2f0b5d-cb0b-42a8-bd53-514a4e94b0a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f2f0b5d-cb0b-42a8-bd53-514a4e94b0a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f2f0b5d-cb0b-42a8-bd53-514a4e94b0a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/sub-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f2f0b5d-cb0b-42a8-bd53-514a4e94b0a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f2f0b5d-cb0b-42a8-bd53-514a4e94b0a7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f2f0b5d-cb0b-42a8-bd53-514a4e94b0a7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f2f0b5d-cb0b-42a8-bd53-514a4e94b0a7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f2f0b5d-cb0b-42a8-bd53-514a4e94b0a7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36978865-3899-457e-93f6-f842e91dfe61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40270","PortSpecifier":{"PortValue":40270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36978865-3899-457e-93f6-f842e91dfe61","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36978865-3899-457e-93f6-f842e91dfe61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40270","PortSpecifier":{"PortValue":40270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651971,"nanos":559791483},"http":{"id":"36978865-3899-457e-93f6-f842e91dfe61","method":"POST","headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36978865-3899-457e-93f6-f842e91dfe61","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36978865-3899-457e-93f6-f842e91dfe61","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36978865-3899-457e-93f6-f842e91dfe61","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36978865-3899-457e-93f6-f842e91dfe61","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36978865-3899-457e-93f6-f842e91dfe61","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36978865-3899-457e-93f6-f842e91dfe61","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e812a4/sub-test-model-e812a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36978865-3899-457e-93f6-f842e91dfe61","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36978865-3899-457e-93f6-f842e91dfe61","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36978865-3899-457e-93f6-f842e91dfe61","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36978865-3899-457e-93f6-f842e91dfe61","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36978865-3899-457e-93f6-f842e91dfe61","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"819c2432-59a2-4a28-81b2-9c6abd2954cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39416","PortSpecifier":{"PortValue":39416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"819c2432-59a2-4a28-81b2-9c6abd2954cf","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"819c2432-59a2-4a28-81b2-9c6abd2954cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39416","PortSpecifier":{"PortValue":39416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651971,"nanos":597327693},"http":{"id":"819c2432-59a2-4a28-81b2-9c6abd2954cf","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"819c2432-59a2-4a28-81b2-9c6abd2954cf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iLcWR1ZrlTWJ0Q5y_5eDLiGoJehvqQCq7MOM2bI8ch1qhWzOKQ1HaN5TsS1b"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"819c2432-59a2-4a28-81b2-9c6abd2954cf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iLcWR1ZrlTWJ0Q5y_5eDLiGoJehvqQCq7MOM2bI8ch1qhWzOKQ1HaN5TsS1b\"}"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"819c2432-59a2-4a28-81b2-9c6abd2954cf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bded2bd9-b3e8-466d-aa49-75b07a3c2e68","keyName":"e2e-sub-iso-f9e645","subscription":"e2e-shared-sub-ad83ff","tenant":"e2e-shared-a-e239ac","userId":"bded2bd9-b3e8-466d-aa49-75b07a3c2e68","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"819c2432-59a2-4a28-81b2-9c6abd2954cf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"819c2432-59a2-4a28-81b2-9c6abd2954cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"819c2432-59a2-4a28-81b2-9c6abd2954cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"819c2432-59a2-4a28-81b2-9c6abd2954cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/sub-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"819c2432-59a2-4a28-81b2-9c6abd2954cf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"819c2432-59a2-4a28-81b2-9c6abd2954cf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ad83ff"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"819c2432-59a2-4a28-81b2-9c6abd2954cf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"819c2432-59a2-4a28-81b2-9c6abd2954cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"819c2432-59a2-4a28-81b2-9c6abd2954cf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"819c2432-59a2-4a28-81b2-9c6abd2954cf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"041e408f-c02e-4b67-ac4b-6fdf6b0d7fdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40284","PortSpecifier":{"PortValue":40284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"041e408f-c02e-4b67-ac4b-6fdf6b0d7fdc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"041e408f-c02e-4b67-ac4b-6fdf6b0d7fdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40284","PortSpecifier":{"PortValue":40284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783651971,"nanos":634644683},"http":{"id":"041e408f-c02e-4b67-ac4b-6fdf6b0d7fdc","method":"POST","headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"041e408f-c02e-4b67-ac4b-6fdf6b0d7fdc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-riPw9GaAregNTXmh_heJ0qfeQc9AjUr7m7u4eq0c5skOu3z0JtROzj6QNAjL"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"041e408f-c02e-4b67-ac4b-6fdf6b0d7fdc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e812a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-riPw9GaAregNTXmh_heJ0qfeQc9AjUr7m7u4eq0c5skOu3z0JtROzj6QNAjL\"}"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"041e408f-c02e-4b67-ac4b-6fdf6b0d7fdc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e812a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"32e87e66-3caa-4503-b6ec-2e9f04b635e7","keyName":"e2e-sub-iso-c53704","subscription":"e2e-shared-sub-ad83ff","tenant":"e2e-shared-b-e812a4","userId":"32e87e66-3caa-4503-b6ec-2e9f04b635e7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"041e408f-c02e-4b67-ac4b-6fdf6b0d7fdc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"041e408f-c02e-4b67-ac4b-6fdf6b0d7fdc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"041e408f-c02e-4b67-ac4b-6fdf6b0d7fdc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"041e408f-c02e-4b67-ac4b-6fdf6b0d7fdc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e812a4/sub-test-model-e812a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"041e408f-c02e-4b67-ac4b-6fdf6b0d7fdc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"041e408f-c02e-4b67-ac4b-6fdf6b0d7fdc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"041e408f-c02e-4b67-ac4b-6fdf6b0d7fdc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ad83ff"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"041e408f-c02e-4b67-ac4b-6fdf6b0d7fdc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"041e408f-c02e-4b67-ac4b-6fdf6b0d7fdc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:52:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"041e408f-c02e-4b67-ac4b-6fdf6b0d7fdc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:52:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0633def732b8a8e90c9df6e8de0af75b67ef64cacabe35d387f1a4354ff9ca2"} {"level":"info","ts":"2026-07-10T02:52:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b17304a9890679f9f9d25f6011d0f87a4dc881a1448135057dc86f68dd30f4f6"} {"level":"info","ts":"2026-07-10T02:52:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f351832db14245573ee320e98de7e8d0364e39b6e99b5937f1d36f82afd5d455"} {"level":"info","ts":"2026-07-10T02:52:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7df9e240a58a1e81d9863a9e3046ac5d0f0636ce467ef8edcb64bba2422803d5"} {"level":"info","ts":"2026-07-10T02:52:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd36704a5e93566e8db7183033848bcfeda01c67df47a7eeabe99d9d06073824"} {"level":"info","ts":"2026-07-10T02:52:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f3a19f7a22b32ca193cf450740bec0de1939fa9b1dd30d2e6ef50c1c07a7e64"} {"level":"info","ts":"2026-07-10T02:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d33fc3f2c8bf87f07b0394ad3aae013333e61c43dda4c44e6f1ed1e47d654f4"} {"level":"info","ts":"2026-07-10T02:52:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccf4d1ee8068b54caa8ca866aeb0a8d968a18991c86006a28fef8e1dcdacbfa6"} {"level":"info","ts":"2026-07-10T02:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ec8db897258a5e454423280907bc792f17f857911780894cbb5ffcd46530896"} {"level":"info","ts":"2026-07-10T02:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8043f4321a38d3e3b9b91370932d345ee407eb361b7c96849b8abf3d4c2ff9b2"} {"level":"info","ts":"2026-07-10T02:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ece1cb28360f409876e99dcbd7c193be887e897120db5e6c6da391143fa65705"} {"level":"info","ts":"2026-07-10T02:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d93929c2bf31a265afa820d1a6b9f9ad22564d4ca943e678a74928eaad21b20"} {"level":"info","ts":"2026-07-10T02:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0260d22a9ca081480d50fd765b7efe64af53e903a1d2587f76a00f1014305e5"} {"level":"info","ts":"2026-07-10T02:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afabd41054b98a5fd15c0b50bc6f930cbde5bae8d57b34dfb5ba0c8014c6df66"} {"level":"info","ts":"2026-07-10T02:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae0ed52459e7981035b8766289f8f9da522b39215941334f3839b96cc37818da"} {"level":"info","ts":"2026-07-10T02:53:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1285a51804860d9fe04adca03b997b22eda4c2af78502042d3f65bab726f6466"} {"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23864542151b2e5f68ceb9a0305fceeff6fd8b4cfe0374d89edaa92f7ac4beb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23864542151b2e5f68ceb9a0305fceeff6fd8b4cfe0374d89edaa92f7ac4beb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23864542151b2e5f68ceb9a0305fceeff6fd8b4cfe0374d89edaa92f7ac4beb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23864542151b2e5f68ceb9a0305fceeff6fd8b4cfe0374d89edaa92f7ac4beb6"} {"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23864542151b2e5f68ceb9a0305fceeff6fd8b4cfe0374d89edaa92f7ac4beb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23864542151b2e5f68ceb9a0305fceeff6fd8b4cfe0374d89edaa92f7ac4beb6"} {"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23864542151b2e5f68ceb9a0305fceeff6fd8b4cfe0374d89edaa92f7ac4beb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23864542151b2e5f68ceb9a0305fceeff6fd8b4cfe0374d89edaa92f7ac4beb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23864542151b2e5f68ceb9a0305fceeff6fd8b4cfe0374d89edaa92f7ac4beb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23864542151b2e5f68ceb9a0305fceeff6fd8b4cfe0374d89edaa92f7ac4beb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23864542151b2e5f68ceb9a0305fceeff6fd8b4cfe0374d89edaa92f7ac4beb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23864542151b2e5f68ceb9a0305fceeff6fd8b4cfe0374d89edaa92f7ac4beb6"} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06"} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06"} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06"} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06"} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06"} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a7b3a31f5873d4d056524257c16892f9f29a5b113a80f15156e836b7fae78c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a7b3a31f5873d4d056524257c16892f9f29a5b113a80f15156e836b7fae78c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a7b3a31f5873d4d056524257c16892f9f29a5b113a80f15156e836b7fae78c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a7b3a31f5873d4d056524257c16892f9f29a5b113a80f15156e836b7fae78c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a7b3a31f5873d4d056524257c16892f9f29a5b113a80f15156e836b7fae78c"} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a7b3a31f5873d4d056524257c16892f9f29a5b113a80f15156e836b7fae78c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a7b3a31f5873d4d056524257c16892f9f29a5b113a80f15156e836b7fae78c"} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a7b3a31f5873d4d056524257c16892f9f29a5b113a80f15156e836b7fae78c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3a7b3a31f5873d4d056524257c16892f9f29a5b113a80f15156e836b7fae78c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a7b3a31f5873d4d056524257c16892f9f29a5b113a80f15156e836b7fae78c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a7b3a31f5873d4d056524257c16892f9f29a5b113a80f15156e836b7fae78c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a7b3a31f5873d4d056524257c16892f9f29a5b113a80f15156e836b7fae78c"} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8"} {"level":"error","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8"} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8"} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8"} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9"} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9"} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8"} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c"} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c"} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9"} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59a920bb9a6456a2e4fe6dcf561a2ccade7acb73946c77429107bf8d42a5ecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c"} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59a920bb9a6456a2e4fe6dcf561a2ccade7acb73946c77429107bf8d42a5ecd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59a920bb9a6456a2e4fe6dcf561a2ccade7acb73946c77429107bf8d42a5ecd"} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59a920bb9a6456a2e4fe6dcf561a2ccade7acb73946c77429107bf8d42a5ecd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a59a920bb9a6456a2e4fe6dcf561a2ccade7acb73946c77429107bf8d42a5ecd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59a920bb9a6456a2e4fe6dcf561a2ccade7acb73946c77429107bf8d42a5ecd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f"} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59a920bb9a6456a2e4fe6dcf561a2ccade7acb73946c77429107bf8d42a5ecd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c"} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59a920bb9a6456a2e4fe6dcf561a2ccade7acb73946c77429107bf8d42a5ecd"} {"level":"info","ts":"2026-07-10T02:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f"} {"level":"debug","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7f36cc9c6a9fe9e44b4c83a12ad187147da69678007dd978022bae4143789f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7f36cc9c6a9fe9e44b4c83a12ad187147da69678007dd978022bae4143789f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7f36cc9c6a9fe9e44b4c83a12ad187147da69678007dd978022bae4143789f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7f36cc9c6a9fe9e44b4c83a12ad187147da69678007dd978022bae4143789f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7f36cc9c6a9fe9e44b4c83a12ad187147da69678007dd978022bae4143789f"} {"level":"debug","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7f36cc9c6a9fe9e44b4c83a12ad187147da69678007dd978022bae4143789f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7f36cc9c6a9fe9e44b4c83a12ad187147da69678007dd978022bae4143789f"} {"level":"debug","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7f36cc9c6a9fe9e44b4c83a12ad187147da69678007dd978022bae4143789f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7f36cc9c6a9fe9e44b4c83a12ad187147da69678007dd978022bae4143789f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7f36cc9c6a9fe9e44b4c83a12ad187147da69678007dd978022bae4143789f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d670c8c4e9f786a1457da22c68b7e0a21bf6b70ada49d4c9e7103b495c681d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d670c8c4e9f786a1457da22c68b7e0a21bf6b70ada49d4c9e7103b495c681d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7f36cc9c6a9fe9e44b4c83a12ad187147da69678007dd978022bae4143789f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d670c8c4e9f786a1457da22c68b7e0a21bf6b70ada49d4c9e7103b495c681d2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d670c8c4e9f786a1457da22c68b7e0a21bf6b70ada49d4c9e7103b495c681d2f"} {"level":"debug","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d670c8c4e9f786a1457da22c68b7e0a21bf6b70ada49d4c9e7103b495c681d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d670c8c4e9f786a1457da22c68b7e0a21bf6b70ada49d4c9e7103b495c681d2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d670c8c4e9f786a1457da22c68b7e0a21bf6b70ada49d4c9e7103b495c681d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d670c8c4e9f786a1457da22c68b7e0a21bf6b70ada49d4c9e7103b495c681d2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7f36cc9c6a9fe9e44b4c83a12ad187147da69678007dd978022bae4143789f"} {"level":"info","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d670c8c4e9f786a1457da22c68b7e0a21bf6b70ada49d4c9e7103b495c681d2f"} {"level":"debug","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f"} {"level":"debug","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f"} {"level":"debug","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f"} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f"} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f"} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036"} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036"} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036"} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036"} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036"} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036"} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd"} {"level":"error","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd"} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c90d48eb886e4000e02f854a59903c30ac7312452710f2907e6d2091d3b8ad83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c90d48eb886e4000e02f854a59903c30ac7312452710f2907e6d2091d3b8ad83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c90d48eb886e4000e02f854a59903c30ac7312452710f2907e6d2091d3b8ad83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c90d48eb886e4000e02f854a59903c30ac7312452710f2907e6d2091d3b8ad83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c90d48eb886e4000e02f854a59903c30ac7312452710f2907e6d2091d3b8ad83"} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c90d48eb886e4000e02f854a59903c30ac7312452710f2907e6d2091d3b8ad83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c90d48eb886e4000e02f854a59903c30ac7312452710f2907e6d2091d3b8ad83"} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd"} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c90d48eb886e4000e02f854a59903c30ac7312452710f2907e6d2091d3b8ad83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c90d48eb886e4000e02f854a59903c30ac7312452710f2907e6d2091d3b8ad83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c90d48eb886e4000e02f854a59903c30ac7312452710f2907e6d2091d3b8ad83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c90d48eb886e4000e02f854a59903c30ac7312452710f2907e6d2091d3b8ad83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625"} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c90d48eb886e4000e02f854a59903c30ac7312452710f2907e6d2091d3b8ad83"} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625"} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625"} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625"} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625"} {"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625"} {"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625"} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"error","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"error","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18d1a8d3f6247ef2d6505c67c124c4833e7dcd2ec3f3661280fda10e4dc1892","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18d1a8d3f6247ef2d6505c67c124c4833e7dcd2ec3f3661280fda10e4dc1892"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d670c8c4e9f786a1457da22c68b7e0a21bf6b70ada49d4c9e7103b495c681d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036"} {"level":"error","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d670c8c4e9f786a1457da22c68b7e0a21bf6b70ada49d4c9e7103b495c681d2f"} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625"} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59a920bb9a6456a2e4fe6dcf561a2ccade7acb73946c77429107bf8d42a5ecd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59a920bb9a6456a2e4fe6dcf561a2ccade7acb73946c77429107bf8d42a5ecd"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23864542151b2e5f68ceb9a0305fceeff6fd8b4cfe0374d89edaa92f7ac4beb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7f36cc9c6a9fe9e44b4c83a12ad187147da69678007dd978022bae4143789f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23864542151b2e5f68ceb9a0305fceeff6fd8b4cfe0374d89edaa92f7ac4beb6"} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7f36cc9c6a9fe9e44b4c83a12ad187147da69678007dd978022bae4143789f"} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c90d48eb886e4000e02f854a59903c30ac7312452710f2907e6d2091d3b8ad83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c90d48eb886e4000e02f854a59903c30ac7312452710f2907e6d2091d3b8ad83"} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a7b3a31f5873d4d056524257c16892f9f29a5b113a80f15156e836b7fae78c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4396479b96e6c35565a6dd96eb1957d8847e8452ac5c0be34e0bf603b4aec3b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a7b3a31f5873d4d056524257c16892f9f29a5b113a80f15156e836b7fae78c"} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4396479b96e6c35565a6dd96eb1957d8847e8452ac5c0be34e0bf603b4aec3b5"} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f"} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f"} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c"} {"level":"error","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884"} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T02:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"} {"level":"error","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T02:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d667e01-bc35-4ad6-a9b3-2644a992bb38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40670","PortSpecifier":{"PortValue":40670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d667e01-bc35-4ad6-a9b3-2644a992bb38","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d667e01-bc35-4ad6-a9b3-2644a992bb38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40670","PortSpecifier":{"PortValue":40670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652083,"nanos":430659187},"http":{"id":"6d667e01-bc35-4ad6-a9b3-2644a992bb38","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d667e01-bc35-4ad6-a9b3-2644a992bb38","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d667e01-bc35-4ad6-a9b3-2644a992bb38","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d667e01-bc35-4ad6-a9b3-2644a992bb38","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d667e01-bc35-4ad6-a9b3-2644a992bb38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d667e01-bc35-4ad6-a9b3-2644a992bb38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d667e01-bc35-4ad6-a9b3-2644a992bb38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d667e01-bc35-4ad6-a9b3-2644a992bb38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d667e01-bc35-4ad6-a9b3-2644a992bb38","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d667e01-bc35-4ad6-a9b3-2644a992bb38","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d667e01-bc35-4ad6-a9b3-2644a992bb38","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d667e01-bc35-4ad6-a9b3-2644a992bb38","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fce576ee-363c-4efc-a66a-4f76ab74a40b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:41226","PortSpecifier":{"PortValue":41226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fce576ee-363c-4efc-a66a-4f76ab74a40b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fce576ee-363c-4efc-a66a-4f76ab74a40b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:41226","PortSpecifier":{"PortValue":41226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652083,"nanos":485789723},"http":{"id":"fce576ee-363c-4efc-a66a-4f76ab74a40b","method":"POST","headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fce576ee-363c-4efc-a66a-4f76ab74a40b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fce576ee-363c-4efc-a66a-4f76ab74a40b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fce576ee-363c-4efc-a66a-4f76ab74a40b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce576ee-363c-4efc-a66a-4f76ab74a40b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce576ee-363c-4efc-a66a-4f76ab74a40b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce576ee-363c-4efc-a66a-4f76ab74a40b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e812a4/rate-test-model-e812a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fce576ee-363c-4efc-a66a-4f76ab74a40b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fce576ee-363c-4efc-a66a-4f76ab74a40b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fce576ee-363c-4efc-a66a-4f76ab74a40b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fce576ee-363c-4efc-a66a-4f76ab74a40b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fce576ee-363c-4efc-a66a-4f76ab74a40b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40676","PortSpecifier":{"PortValue":40676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","method":"POST","path":"/ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac/v1/completions","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40676","PortSpecifier":{"PortValue":40676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652083,"nanos":539882850},"http":{"id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-My1DWbVtsr9v3W3q_nNBQ31Pq9M7wrvuEu7PXYE6uQizWeoBuLh5wfOhRrH2"} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-My1DWbVtsr9v3W3q_nNBQ31Pq9M7wrvuEu7PXYE6uQizWeoBuLh5wfOhRrH2\"}"} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5dbe98ee-c79e-4fd0-884b-9bbf5a89bb83","keyName":"e2e-rate-a-144de6","subscription":"e2e-rate-iso-a-144de6","tenant":"e2e-shared-a-e239ac","userId":"5dbe98ee-c79e-4fd0-884b-9bbf5a89bb83","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac\",\"requestedSubscription\":\"e2e-rate-iso-a-144de6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e239ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-144de6","namespace":"ai-tenant-e2e-shared-a-e239ac","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-144de6"} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5dbe98ee-c79e-4fd0-884b-9bbf5a89bb83","keyName":"e2e-rate-a-144de6","selected_subscription":"e2e-rate-iso-a-144de6","selected_subscription_key":"ai-tenant-e2e-shared-a-e239ac/e2e-rate-iso-a-144de6@ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e239ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-144de6","namespace":"ai-tenant-e2e-shared-a-e239ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:54:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c844e87-7cd2-4c0a-80fc-7127475d5301","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40680","PortSpecifier":{"PortValue":40680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9279b326-402e-4f43-bfd7-9db8ed47738e","method":"POST","path":"/ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac/v1/completions","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40680","PortSpecifier":{"PortValue":40680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652084,"nanos":604472363},"http":{"id":"9279b326-402e-4f43-bfd7-9db8ed47738e","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-My1DWbVtsr9v3W3q_nNBQ31Pq9M7wrvuEu7PXYE6uQizWeoBuLh5wfOhRrH2"} {"level":"debug","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-My1DWbVtsr9v3W3q_nNBQ31Pq9M7wrvuEu7PXYE6uQizWeoBuLh5wfOhRrH2\"}"} {"level":"debug","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5dbe98ee-c79e-4fd0-884b-9bbf5a89bb83","keyName":"e2e-rate-a-144de6","subscription":"e2e-rate-iso-a-144de6","tenant":"e2e-shared-a-e239ac","userId":"5dbe98ee-c79e-4fd0-884b-9bbf5a89bb83","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac\",\"requestedSubscription\":\"e2e-rate-iso-a-144de6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e239ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-144de6","namespace":"ai-tenant-e2e-shared-a-e239ac","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-144de6"} {"level":"debug","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5dbe98ee-c79e-4fd0-884b-9bbf5a89bb83","keyName":"e2e-rate-a-144de6","selected_subscription":"e2e-rate-iso-a-144de6","selected_subscription_key":"ai-tenant-e2e-shared-a-e239ac/e2e-rate-iso-a-144de6@ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e239ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-144de6","namespace":"ai-tenant-e2e-shared-a-e239ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:54:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9279b326-402e-4f43-bfd7-9db8ed47738e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40696","PortSpecifier":{"PortValue":40696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"abea8cb7-6401-4f6d-be1b-b2835679426f","method":"POST","path":"/ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac/v1/completions","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40696","PortSpecifier":{"PortValue":40696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652085,"nanos":645308396},"http":{"id":"abea8cb7-6401-4f6d-be1b-b2835679426f","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-My1DWbVtsr9v3W3q_nNBQ31Pq9M7wrvuEu7PXYE6uQizWeoBuLh5wfOhRrH2"} {"level":"debug","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-My1DWbVtsr9v3W3q_nNBQ31Pq9M7wrvuEu7PXYE6uQizWeoBuLh5wfOhRrH2\"}"} {"level":"debug","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5dbe98ee-c79e-4fd0-884b-9bbf5a89bb83","keyName":"e2e-rate-a-144de6","subscription":"e2e-rate-iso-a-144de6","tenant":"e2e-shared-a-e239ac","userId":"5dbe98ee-c79e-4fd0-884b-9bbf5a89bb83","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac\",\"requestedSubscription\":\"e2e-rate-iso-a-144de6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e239ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-144de6","namespace":"ai-tenant-e2e-shared-a-e239ac","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-144de6"} {"level":"debug","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5dbe98ee-c79e-4fd0-884b-9bbf5a89bb83","keyName":"e2e-rate-a-144de6","selected_subscription":"e2e-rate-iso-a-144de6","selected_subscription_key":"ai-tenant-e2e-shared-a-e239ac/e2e-rate-iso-a-144de6@ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e239ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-144de6","namespace":"ai-tenant-e2e-shared-a-e239ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:54:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abea8cb7-6401-4f6d-be1b-b2835679426f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01f7d1b6-1c39-4697-8bf7-bba89de4a49a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:41332","PortSpecifier":{"PortValue":41332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01f7d1b6-1c39-4697-8bf7-bba89de4a49a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01f7d1b6-1c39-4697-8bf7-bba89de4a49a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:41332","PortSpecifier":{"PortValue":41332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652100,"nanos":860287835},"http":{"id":"01f7d1b6-1c39-4697-8bf7-bba89de4a49a","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"01f7d1b6-1c39-4697-8bf7-bba89de4a49a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01f7d1b6-1c39-4697-8bf7-bba89de4a49a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01f7d1b6-1c39-4697-8bf7-bba89de4a49a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01f7d1b6-1c39-4697-8bf7-bba89de4a49a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01f7d1b6-1c39-4697-8bf7-bba89de4a49a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01f7d1b6-1c39-4697-8bf7-bba89de4a49a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01f7d1b6-1c39-4697-8bf7-bba89de4a49a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01f7d1b6-1c39-4697-8bf7-bba89de4a49a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01f7d1b6-1c39-4697-8bf7-bba89de4a49a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01f7d1b6-1c39-4697-8bf7-bba89de4a49a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01f7d1b6-1c39-4697-8bf7-bba89de4a49a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71d6eb3f-5af1-4166-9d7f-6abb7361500f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:45604","PortSpecifier":{"PortValue":45604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71d6eb3f-5af1-4166-9d7f-6abb7361500f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71d6eb3f-5af1-4166-9d7f-6abb7361500f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:45604","PortSpecifier":{"PortValue":45604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652100,"nanos":901330597},"http":{"id":"71d6eb3f-5af1-4166-9d7f-6abb7361500f","method":"POST","headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71d6eb3f-5af1-4166-9d7f-6abb7361500f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71d6eb3f-5af1-4166-9d7f-6abb7361500f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"]}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71d6eb3f-5af1-4166-9d7f-6abb7361500f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b63dca35e942"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5a2f2f04-f412-428a-a3df-d2a46b5e0ebb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"59b177ff-ceaf-4131-944c-9c566d12cab4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71d6eb3f-5af1-4166-9d7f-6abb7361500f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71d6eb3f-5af1-4166-9d7f-6abb7361500f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71d6eb3f-5af1-4166-9d7f-6abb7361500f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e812a4/rate-test-model-e812a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71d6eb3f-5af1-4166-9d7f-6abb7361500f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71d6eb3f-5af1-4166-9d7f-6abb7361500f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71d6eb3f-5af1-4166-9d7f-6abb7361500f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71d6eb3f-5af1-4166-9d7f-6abb7361500f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71d6eb3f-5af1-4166-9d7f-6abb7361500f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:41338","PortSpecifier":{"PortValue":41338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","method":"POST","path":"/ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac/v1/completions","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:41338","PortSpecifier":{"PortValue":41338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652100,"nanos":937390560},"http":{"id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QAo1hn8YJxAv6DoN_RfmUlAclEHBxlNCAUxZKoRnG2cIJhHAsbxG55NUdOue"} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QAo1hn8YJxAv6DoN_RfmUlAclEHBxlNCAUxZKoRnG2cIJhHAsbxG55NUdOue\"}"} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f35c4d0c-47be-4d00-ab94-e6384d986c7d","keyName":"e2e-rate-a-079950","subscription":"e2e-rate-iso-a-079950","tenant":"e2e-shared-a-e239ac","userId":"f35c4d0c-47be-4d00-ab94-e6384d986c7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac\",\"requestedSubscription\":\"e2e-rate-iso-a-079950\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e239ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-079950","namespace":"ai-tenant-e2e-shared-a-e239ac","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-079950"} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f35c4d0c-47be-4d00-ab94-e6384d986c7d","keyName":"e2e-rate-a-079950","selected_subscription":"e2e-rate-iso-a-079950","selected_subscription_key":"ai-tenant-e2e-shared-a-e239ac/e2e-rate-iso-a-079950@ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e239ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-079950","namespace":"ai-tenant-e2e-shared-a-e239ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:55:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fa7223f-e697-4c05-85b9-017b50cf8a70","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:41352","PortSpecifier":{"PortValue":41352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","method":"POST","path":"/ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac/v1/completions","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:41352","PortSpecifier":{"PortValue":41352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652101,"nanos":973826077},"http":{"id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QAo1hn8YJxAv6DoN_RfmUlAclEHBxlNCAUxZKoRnG2cIJhHAsbxG55NUdOue"} {"level":"debug","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QAo1hn8YJxAv6DoN_RfmUlAclEHBxlNCAUxZKoRnG2cIJhHAsbxG55NUdOue\"}"} {"level":"debug","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f35c4d0c-47be-4d00-ab94-e6384d986c7d","keyName":"e2e-rate-a-079950","subscription":"e2e-rate-iso-a-079950","tenant":"e2e-shared-a-e239ac","userId":"f35c4d0c-47be-4d00-ab94-e6384d986c7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac\",\"requestedSubscription\":\"e2e-rate-iso-a-079950\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e239ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-079950","namespace":"ai-tenant-e2e-shared-a-e239ac","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-079950"} {"level":"debug","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f35c4d0c-47be-4d00-ab94-e6384d986c7d","keyName":"e2e-rate-a-079950","selected_subscription":"e2e-rate-iso-a-079950","selected_subscription_key":"ai-tenant-e2e-shared-a-e239ac/e2e-rate-iso-a-079950@ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e239ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-079950","namespace":"ai-tenant-e2e-shared-a-e239ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:55:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cf3da38-2020-4417-ae19-4b7932a8a7ea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:41362","PortSpecifier":{"PortValue":41362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","method":"POST","path":"/ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac/v1/completions","host":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:41362","PortSpecifier":{"PortValue":41362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652103,"nanos":9443181},"http":{"id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","method":"POST","headers":{":authority":"e2e-shared-a-e239ac.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QAo1hn8YJxAv6DoN_RfmUlAclEHBxlNCAUxZKoRnG2cIJhHAsbxG55NUdOue"} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QAo1hn8YJxAv6DoN_RfmUlAclEHBxlNCAUxZKoRnG2cIJhHAsbxG55NUdOue\"}"} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f35c4d0c-47be-4d00-ab94-e6384d986c7d","keyName":"e2e-rate-a-079950","subscription":"e2e-rate-iso-a-079950","tenant":"e2e-shared-a-e239ac","userId":"f35c4d0c-47be-4d00-ab94-e6384d986c7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac\",\"requestedSubscription\":\"e2e-rate-iso-a-079950\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e239ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e239ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-079950","namespace":"ai-tenant-e2e-shared-a-e239ac","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-079950"} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f35c4d0c-47be-4d00-ab94-e6384d986c7d","keyName":"e2e-rate-a-079950","selected_subscription":"e2e-rate-iso-a-079950","selected_subscription_key":"ai-tenant-e2e-shared-a-e239ac/e2e-rate-iso-a-079950@ai-tenant-e2e-shared-a-e239ac/rate-test-model-e239ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e239ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-079950","namespace":"ai-tenant-e2e-shared-a-e239ac","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cebbd23a-2b1d-4b6c-aec5-04cb1e1e44d1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:45608","PortSpecifier":{"PortValue":45608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","method":"POST","path":"/ai-tenant-e2e-shared-b-e812a4/rate-test-model-e812a4/v1/completions","host":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:45608","PortSpecifier":{"PortValue":45608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783652103,"nanos":46613911},"http":{"id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","method":"POST","headers":{":authority":"e2e-shared-b-e812a4.apps.23073074-ce8d-42fd-b6ed-b63dca35e942.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-e812a4/rate-test-model-e812a4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eYwnczbfR8HQcYtT_obAx8qcsYxznZQFsN74vPD2W6fcyZ1kzd3DVJMNUauM"} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e812a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eYwnczbfR8HQcYtT_obAx8qcsYxznZQFsN74vPD2W6fcyZ1kzd3DVJMNUauM\"}"} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e812a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f644c8ab-e088-4a01-921b-4b0a8cd1be56","keyName":"e2e-rate-b-079950","subscription":"e2e-rate-iso-b-079950","tenant":"e2e-shared-b-e812a4","userId":"f644c8ab-e088-4a01-921b-4b0a8cd1be56","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-e812a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-e812a4/rate-test-model-e812a4\",\"requestedSubscription\":\"e2e-rate-iso-b-079950\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e812a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e812a4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-079950","namespace":"ai-tenant-e2e-shared-b-e812a4","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e812a4/rate-test-model-e812a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-079950"} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f644c8ab-e088-4a01-921b-4b0a8cd1be56","keyName":"e2e-rate-b-079950","selected_subscription":"e2e-rate-iso-b-079950","selected_subscription_key":"ai-tenant-e2e-shared-b-e812a4/e2e-rate-iso-b-079950@ai-tenant-e2e-shared-b-e812a4/rate-test-model-e812a4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e812a4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-079950","namespace":"ai-tenant-e2e-shared-b-e812a4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T02:55:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6fdaca8-089e-4043-a07d-c438f4b0bf16","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T02:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19db8aed5d57a237d55c2dd4e48ee5b1af1ec262967926e7de305b146a431e06"} {"level":"info","ts":"2026-07-10T02:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d670c8c4e9f786a1457da22c68b7e0a21bf6b70ada49d4c9e7103b495c681d2f"} {"level":"info","ts":"2026-07-10T02:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61d594b4dd2b8dbf933e86f2e81c39e12520d095b7911fe995a90dca55c4b23f"} {"level":"info","ts":"2026-07-10T02:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3a7b3a31f5873d4d056524257c16892f9f29a5b113a80f15156e836b7fae78c"} {"level":"info","ts":"2026-07-10T02:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba892e83618232d46bc8f3e0cd511662646eb83f748ff2f115ac7925cfb434c8"} {"level":"info","ts":"2026-07-10T02:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23864542151b2e5f68ceb9a0305fceeff6fd8b4cfe0374d89edaa92f7ac4beb6"} {"level":"info","ts":"2026-07-10T02:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a06c7b3ea64d372993e677851afcfe286e40908316e6be30bd1cc958098f625"} {"level":"info","ts":"2026-07-10T02:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e1303192112ace0552a8d37cb9cf8b403e2d2ed34af490aa8835c3b81e28036"} {"level":"info","ts":"2026-07-10T02:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/845ee83faab05a32319c7427a208d15b09ce97a699554137ea405da5ac5760f9"} {"level":"info","ts":"2026-07-10T02:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35c362e51fa095f7d6b1ca97d2beb10ba443dd1ddf5b3e00d0d6031449aed24f"} {"level":"info","ts":"2026-07-10T02:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf4feb2c354b2d77a14f4238497953c622c18381b9c89188e8af89640d2b8fdd"} {"level":"info","ts":"2026-07-10T02:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a59a920bb9a6456a2e4fe6dcf561a2ccade7acb73946c77429107bf8d42a5ecd"} {"level":"info","ts":"2026-07-10T02:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e77fdcb6b88a43b45118c1ad3217c52039adf1755aaef948de29085ebef7672c"} {"level":"info","ts":"2026-07-10T02:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54de19505f4861de444a4d25d34d38a98e04f917607f056b03c4db24136a0e06"} {"level":"info","ts":"2026-07-10T02:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd7f36cc9c6a9fe9e44b4c83a12ad187147da69678007dd978022bae4143789f"} {"level":"info","ts":"2026-07-10T02:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c90d48eb886e4000e02f854a59903c30ac7312452710f2907e6d2091d3b8ad83"} {"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f86649b7d161aa543f47c62f812273e7fe97a59dcfde18e321fa0575cdbe05c"} {"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cc2e8a33cd422beb50d652398a4271a830b2fde6833348b7b9c53a2723cea7b"} {"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f2dbb22ef575ff2303006095d574789772dbe382345d5374086ffa9cfb41871"} {"level":"info","ts":"2026-07-10T02:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e18d1a8d3f6247ef2d6505c67c124c4833e7dcd2ec3f3661280fda10e4dc1892"} {"level":"info","ts":"2026-07-10T02:55:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c9a23f211f54f3a1e1f2f631bf248851826ec992e52f47c83685116f1cecf30"} {"level":"info","ts":"2026-07-10T02:55:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4da04cc3f67ddcabb4c5c65a9194d1f5e9be53f8d910a7c9085bc1f122e4884"} {"level":"info","ts":"2026-07-10T02:55:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4396479b96e6c35565a6dd96eb1957d8847e8452ac5c0be34e0bf603b4aec3b5"} {"level":"info","ts":"2026-07-10T02:55:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07d2ee37354aad21105cd8ae925a8a20b13439be1ef1c4c75ffd2f334d2678c3"}