--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318"} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d"} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e"} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:12:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"info","ts":"2026-08-05T18:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e"} {"level":"info","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57602","PortSpecifier":{"PortValue":57602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77","object":"source:{address:{socket_address:{address:\"10.133.0.11:57602\" port_value:57602}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953570 nanos:318963116} http:{id:\"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":318963116,"seconds":1785953570}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":57602},"address":"10.133.0.11:57602"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":318963116,"seconds":1785953570},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:57602","port":57602}}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/auth-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9e40a39-e437-46cf-8f4f-22ed5a6b0a77","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c629e6b4-a33c-4c21-a257-5956cdad4e06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60330","PortSpecifier":{"PortValue":60330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c629e6b4-a33c-4c21-a257-5956cdad4e06","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c629e6b4-a33c-4c21-a257-5956cdad4e06","object":"source:{address:{socket_address:{address:\"10.133.0.11:60330\" port_value:60330}}} destination:{address:{socket_address:{address:\"10.134.0.71:443\" port_value:443}}} request:{time:{seconds:1785953570 nanos:361222632} http:{id:\"c629e6b4-a33c-4c21-a257-5956cdad4e06\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"c629e6b4-a33c-4c21-a257-5956cdad4e06\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c629e6b4-a33c-4c21-a257-5956cdad4e06","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c629e6b4-a33c-4c21-a257-5956cdad4e06","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c629e6b4-a33c-4c21-a257-5956cdad4e06","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c629e6b4-a33c-4c21-a257-5956cdad4e06"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"c629e6b4-a33c-4c21-a257-5956cdad4e06","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":361222632,"seconds":1785953570}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60330},"address":"10.133.0.11:60330"}}}}},"destination":{"address":"10.134.0.71:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c629e6b4-a33c-4c21-a257-5956cdad4e06"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"c629e6b4-a33c-4c21-a257-5956cdad4e06","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":361222632,"seconds":1785953570},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:60330","port":60330}}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c629e6b4-a33c-4c21-a257-5956cdad4e06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c629e6b4-a33c-4c21-a257-5956cdad4e06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c629e6b4-a33c-4c21-a257-5956cdad4e06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-594b65/auth-test-model-594b65\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-594b65/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c629e6b4-a33c-4c21-a257-5956cdad4e06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c629e6b4-a33c-4c21-a257-5956cdad4e06","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c629e6b4-a33c-4c21-a257-5956cdad4e06","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c629e6b4-a33c-4c21-a257-5956cdad4e06","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c629e6b4-a33c-4c21-a257-5956cdad4e06","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60340","PortSpecifier":{"PortValue":60340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3","method":"GET","path":"/maas-api/v1/api-keys/159bff34-9076-47f1-9d70-6ddd4a912244","host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3","object":"source:{address:{socket_address:{address:\"10.133.0.11:60340\" port_value:60340}}} destination:{address:{socket_address:{address:\"10.134.0.71:443\" port_value:443}}} request:{time:{seconds:1785953570 nanos:402582590} http:{id:\"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/159bff34-9076-47f1-9d70-6ddd4a912244\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3\"} path:\"/maas-api/v1/api-keys/159bff34-9076-47f1-9d70-6ddd4a912244\" host:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/159bff34-9076-47f1-9d70-6ddd4a912244",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3","method":"GET","path":"/maas-api/v1/api-keys/159bff34-9076-47f1-9d70-6ddd4a912244","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":402582590,"seconds":1785953570}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60340},"address":"10.133.0.11:60340"}}}}},"destination":{"address":"10.134.0.71:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/159bff34-9076-47f1-9d70-6ddd4a912244",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3","method":"GET","path":"/maas-api/v1/api-keys/159bff34-9076-47f1-9d70-6ddd4a912244","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":402582590,"seconds":1785953570},"url_path":"/maas-api/v1/api-keys/159bff34-9076-47f1-9d70-6ddd4a912244","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:60340","port":60340}}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-594b65/auth-test-model-594b65\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-594b65/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a83250a2-50c9-4e5c-bfa0-f5e71ffcf0b3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af358d02-faa0-4516-84cd-22453c730106","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57606","PortSpecifier":{"PortValue":57606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af358d02-faa0-4516-84cd-22453c730106","method":"GET","path":"/maas-api/v1/api-keys/159bff34-9076-47f1-9d70-6ddd4a912244","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af358d02-faa0-4516-84cd-22453c730106","object":"source:{address:{socket_address:{address:\"10.133.0.11:57606\" port_value:57606}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953570 nanos:438192586} http:{id:\"af358d02-faa0-4516-84cd-22453c730106\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/159bff34-9076-47f1-9d70-6ddd4a912244\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdC04NDhiOTRjNThkLXY4a3hwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"af358d02-faa0-4516-84cd-22453c730106\"} path:\"/maas-api/v1/api-keys/159bff34-9076-47f1-9d70-6ddd4a912244\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af358d02-faa0-4516-84cd-22453c730106","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af358d02-faa0-4516-84cd-22453c730106","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af358d02-faa0-4516-84cd-22453c730106","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/159bff34-9076-47f1-9d70-6ddd4a912244",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdC04NDhiOTRjNThkLXY4a3hwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"af358d02-faa0-4516-84cd-22453c730106"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"af358d02-faa0-4516-84cd-22453c730106","method":"GET","path":"/maas-api/v1/api-keys/159bff34-9076-47f1-9d70-6ddd4a912244","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":438192586,"seconds":1785953570}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":57606},"address":"10.133.0.11:57606"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/159bff34-9076-47f1-9d70-6ddd4a912244",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"af358d02-faa0-4516-84cd-22453c730106"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"af358d02-faa0-4516-84cd-22453c730106","method":"GET","path":"/maas-api/v1/api-keys/159bff34-9076-47f1-9d70-6ddd4a912244","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":438192586,"seconds":1785953570},"url_path":"/maas-api/v1/api-keys/159bff34-9076-47f1-9d70-6ddd4a912244","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:57606","port":57606}}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af358d02-faa0-4516-84cd-22453c730106","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af358d02-faa0-4516-84cd-22453c730106","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af358d02-faa0-4516-84cd-22453c730106","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/auth-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af358d02-faa0-4516-84cd-22453c730106","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af358d02-faa0-4516-84cd-22453c730106","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af358d02-faa0-4516-84cd-22453c730106","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af358d02-faa0-4516-84cd-22453c730106","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:12:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af358d02-faa0-4516-84cd-22453c730106","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/873d8f7beae222d2b320b51ad1f98c3b2333addd02d7185d467861c98f0f6446"} {"level":"info","ts":"2026-08-05T18:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"info","ts":"2026-08-05T18:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d"} {"level":"info","ts":"2026-08-05T18:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318"} {"level":"info","ts":"2026-08-05T18:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b521b066c652233244a98bb6892c4143cc7e2eef150c12b225848758d17083c9"} {"level":"info","ts":"2026-08-05T18:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6"} {"level":"info","ts":"2026-08-05T18:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b"} {"level":"info","ts":"2026-08-05T18:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e"} {"level":"info","ts":"2026-08-05T18:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512"} {"level":"info","ts":"2026-08-05T18:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"debug","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"debug","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"debug","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6"} {"level":"debug","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6"} {"level":"debug","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6"} {"level":"debug","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6"} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512"} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512"} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b"} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b521b066c652233244a98bb6892c4143cc7e2eef150c12b225848758d17083c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b521b066c652233244a98bb6892c4143cc7e2eef150c12b225848758d17083c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b521b066c652233244a98bb6892c4143cc7e2eef150c12b225848758d17083c9"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b521b066c652233244a98bb6892c4143cc7e2eef150c12b225848758d17083c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b521b066c652233244a98bb6892c4143cc7e2eef150c12b225848758d17083c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b521b066c652233244a98bb6892c4143cc7e2eef150c12b225848758d17083c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b521b066c652233244a98bb6892c4143cc7e2eef150c12b225848758d17083c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b521b066c652233244a98bb6892c4143cc7e2eef150c12b225848758d17083c9"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b521b066c652233244a98bb6892c4143cc7e2eef150c12b225848758d17083c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b521b066c652233244a98bb6892c4143cc7e2eef150c12b225848758d17083c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b521b066c652233244a98bb6892c4143cc7e2eef150c12b225848758d17083c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b521b066c652233244a98bb6892c4143cc7e2eef150c12b225848758d17083c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b521b066c652233244a98bb6892c4143cc7e2eef150c12b225848758d17083c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b"} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b521b066c652233244a98bb6892c4143cc7e2eef150c12b225848758d17083c9"} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e"} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"error","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873d8f7beae222d2b320b51ad1f98c3b2333addd02d7185d467861c98f0f6446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873d8f7beae222d2b320b51ad1f98c3b2333addd02d7185d467861c98f0f6446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873d8f7beae222d2b320b51ad1f98c3b2333addd02d7185d467861c98f0f6446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873d8f7beae222d2b320b51ad1f98c3b2333addd02d7185d467861c98f0f6446"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873d8f7beae222d2b320b51ad1f98c3b2333addd02d7185d467861c98f0f6446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873d8f7beae222d2b320b51ad1f98c3b2333addd02d7185d467861c98f0f6446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["873d8f7beae222d2b320b51ad1f98c3b2333addd02d7185d467861c98f0f6446"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873d8f7beae222d2b320b51ad1f98c3b2333addd02d7185d467861c98f0f6446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873d8f7beae222d2b320b51ad1f98c3b2333addd02d7185d467861c98f0f6446"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873d8f7beae222d2b320b51ad1f98c3b2333addd02d7185d467861c98f0f6446","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318"} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873d8f7beae222d2b320b51ad1f98c3b2333addd02d7185d467861c98f0f6446"} {"level":"info","ts":"2026-08-05T18:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318"} {"level":"info","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39432","PortSpecifier":{"PortValue":39432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1","object":"source:{address:{socket_address:{address:\"10.133.0.11:39432\" port_value:39432}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953596 nanos:711394886} http:{id:\"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":711394886,"seconds":1785953596}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":39432},"address":"10.133.0.11:39432"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdC04NDhiOTRjNThkLXY4a3hwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":711394886,"seconds":1785953596},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:39432","port":39432}}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/auth-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cc0ebd8-3682-4b9b-b859-1eba38c14cb1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:40074","PortSpecifier":{"PortValue":40074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0","object":"source:{address:{socket_address:{address:\"10.133.0.11:40074\" port_value:40074}}} destination:{address:{socket_address:{address:\"10.134.0.71:443\" port_value:443}}} request:{time:{seconds:1785953596 nanos:751063437} http:{id:\"d260f608-7c04-4eb1-88e5-963a32aa3ca0\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"d260f608-7c04-4eb1-88e5-963a32aa3ca0\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01OTRiNjUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdC05OTlkNDQ0NDgtbDdkYmgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItNTk0YjY1LW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":751063437,"seconds":1785953596}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":40074},"address":"10.133.0.11:40074"}}}}},"destination":{"address":"10.134.0.71:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01OTRiNjUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdC05OTlkNDQ0NDgtbDdkYmgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItNTk0YjY1LW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":751063437,"seconds":1785953596},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:40074","port":40074}}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-594b65/auth-test-model-594b65\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-594b65/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d260f608-7c04-4eb1-88e5-963a32aa3ca0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39440","PortSpecifier":{"PortValue":39440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","object":"source:{address:{socket_address:{address:\"10.133.0.11:39440\" port_value:39440}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953596 nanos:808980230} http:{id:\"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-m69QOUN7WUq7mAi9_sd95VG9agjOqX86A6dakgBGtigueugP1KUdYakSKFy1"} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e6f3a986-28fd-4889-91c7-ff558fd74406","keyName":"e2e-auth-iso-a-f91450","subscription":"e2e-auth-iso-8026bd","tenant":"e2e-shared-a-ba69fc","userId":"e6f3a986-28fd-4889-91c7-ff558fd74406","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":808980230,"seconds":1785953596}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":39440},"address":"10.133.0.11:39440"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":808980230,"seconds":1785953596},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:39440","port":39440}}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/auth-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8026bd"} {"level":"info","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:13:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c890a51-adb5-4bdd-a1a0-a49d9b7b3851","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88d17ffc20fad0a1ff7e65f448685eb8ab0499206ec28a5e38ea0b51eef64f83"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b576e2a5feac59afcf8edbffcd75f871c00c2414c4d7dd0a73458b72a5eea318"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc4110dc4f805d6d48593e14d48f0e8f19747a5cd510fd177748506e53a00512"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f37b4fd3badb346d88be6ba89a18bee0d31735dce2ff278ed83d629abb91f3b"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e15fc18eddd5557f2995345216e251b511cb2762d871aec4466ed86af298a37d"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4644ad12deaab280a70b76647d6cd50fbc4c409fa08eac5326d1cdf5a53b68f3"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ff89b465a528a96a49f729ddd08dc3842b92af1b430c92a55a4dde8eb3a6fb2"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af5e2abd1cdb2893b2dbe594a4b080c8ed186680e392ef7093b96c83ffc048e4"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b521b066c652233244a98bb6892c4143cc7e2eef150c12b225848758d17083c9"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99704586a840669660616fcc0ae9ed88e5fc41bf08d3a35be5bb7fd8ad3f6392"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c289662177d166707f441940205a94cae14751461339a91fc91b1f1b0dddf23d"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1fbcef0b6167b70ce61ea26ce73be2e872ea2818efd584a6cce9cd50baa205e"} {"level":"info","ts":"2026-08-05T18:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ae03b4ce07964c7d60b9be1c1c9ed93f15eb7d49c1790d192d192f09f228ba6"} {"level":"info","ts":"2026-08-05T18:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d1eed12d6fb13a9a077a9032abac97e48e466976a68fdee03a3165dfe5ed360"} {"level":"info","ts":"2026-08-05T18:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/873d8f7beae222d2b320b51ad1f98c3b2333addd02d7185d467861c98f0f6446"} {"level":"info","ts":"2026-08-05T18:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af"} {"level":"info","ts":"2026-08-05T18:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63f1fc6bd4d6b713cd2dd87aebf5272a6676e7dabac1e768958cf9224c0433ee"} {"level":"info","ts":"2026-08-05T18:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6515b0a95e540651167f7b357e5383fa81ee020014b1fcbd51ee11198ddab18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6515b0a95e540651167f7b357e5383fa81ee020014b1fcbd51ee11198ddab18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6515b0a95e540651167f7b357e5383fa81ee020014b1fcbd51ee11198ddab18","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6515b0a95e540651167f7b357e5383fa81ee020014b1fcbd51ee11198ddab18"} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6515b0a95e540651167f7b357e5383fa81ee020014b1fcbd51ee11198ddab18","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6515b0a95e540651167f7b357e5383fa81ee020014b1fcbd51ee11198ddab18"} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6515b0a95e540651167f7b357e5383fa81ee020014b1fcbd51ee11198ddab18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6515b0a95e540651167f7b357e5383fa81ee020014b1fcbd51ee11198ddab18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6515b0a95e540651167f7b357e5383fa81ee020014b1fcbd51ee11198ddab18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6515b0a95e540651167f7b357e5383fa81ee020014b1fcbd51ee11198ddab18","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6515b0a95e540651167f7b357e5383fa81ee020014b1fcbd51ee11198ddab18"} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2160fcb85cb1ed010efa4cc4aca3c7602f67b81224dce563fa9fb8c71df5791e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2160fcb85cb1ed010efa4cc4aca3c7602f67b81224dce563fa9fb8c71df5791e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a04e30f62da1f8f6257c5a4a5de9b7fd4e75a13e2c92126200ca29195d9d7b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2160fcb85cb1ed010efa4cc4aca3c7602f67b81224dce563fa9fb8c71df5791e"} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a04e30f62da1f8f6257c5a4a5de9b7fd4e75a13e2c92126200ca29195d9d7b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2160fcb85cb1ed010efa4cc4aca3c7602f67b81224dce563fa9fb8c71df5791e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2160fcb85cb1ed010efa4cc4aca3c7602f67b81224dce563fa9fb8c71df5791e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2160fcb85cb1ed010efa4cc4aca3c7602f67b81224dce563fa9fb8c71df5791e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a04e30f62da1f8f6257c5a4a5de9b7fd4e75a13e2c92126200ca29195d9d7b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a04e30f62da1f8f6257c5a4a5de9b7fd4e75a13e2c92126200ca29195d9d7b8"} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a04e30f62da1f8f6257c5a4a5de9b7fd4e75a13e2c92126200ca29195d9d7b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2160fcb85cb1ed010efa4cc4aca3c7602f67b81224dce563fa9fb8c71df5791e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2160fcb85cb1ed010efa4cc4aca3c7602f67b81224dce563fa9fb8c71df5791e"} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2160fcb85cb1ed010efa4cc4aca3c7602f67b81224dce563fa9fb8c71df5791e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a04e30f62da1f8f6257c5a4a5de9b7fd4e75a13e2c92126200ca29195d9d7b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2160fcb85cb1ed010efa4cc4aca3c7602f67b81224dce563fa9fb8c71df5791e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2160fcb85cb1ed010efa4cc4aca3c7602f67b81224dce563fa9fb8c71df5791e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a04e30f62da1f8f6257c5a4a5de9b7fd4e75a13e2c92126200ca29195d9d7b8"} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2160fcb85cb1ed010efa4cc4aca3c7602f67b81224dce563fa9fb8c71df5791e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2160fcb85cb1ed010efa4cc4aca3c7602f67b81224dce563fa9fb8c71df5791e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a04e30f62da1f8f6257c5a4a5de9b7fd4e75a13e2c92126200ca29195d9d7b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a04e30f62da1f8f6257c5a4a5de9b7fd4e75a13e2c92126200ca29195d9d7b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2160fcb85cb1ed010efa4cc4aca3c7602f67b81224dce563fa9fb8c71df5791e"} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a04e30f62da1f8f6257c5a4a5de9b7fd4e75a13e2c92126200ca29195d9d7b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2160fcb85cb1ed010efa4cc4aca3c7602f67b81224dce563fa9fb8c71df5791e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a69fb32a15195a7bc14676de04373379bb3aae2a233616461dcb9dcacec054e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a69fb32a15195a7bc14676de04373379bb3aae2a233616461dcb9dcacec054e1"} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a69fb32a15195a7bc14676de04373379bb3aae2a233616461dcb9dcacec054e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a04e30f62da1f8f6257c5a4a5de9b7fd4e75a13e2c92126200ca29195d9d7b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a69fb32a15195a7bc14676de04373379bb3aae2a233616461dcb9dcacec054e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a69fb32a15195a7bc14676de04373379bb3aae2a233616461dcb9dcacec054e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a69fb32a15195a7bc14676de04373379bb3aae2a233616461dcb9dcacec054e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a69fb32a15195a7bc14676de04373379bb3aae2a233616461dcb9dcacec054e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a69fb32a15195a7bc14676de04373379bb3aae2a233616461dcb9dcacec054e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2160fcb85cb1ed010efa4cc4aca3c7602f67b81224dce563fa9fb8c71df5791e"} {"level":"error","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a69fb32a15195a7bc14676de04373379bb3aae2a233616461dcb9dcacec054e1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a69fb32a15195a7bc14676de04373379bb3aae2a233616461dcb9dcacec054e1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a69fb32a15195a7bc14676de04373379bb3aae2a233616461dcb9dcacec054e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a69fb32a15195a7bc14676de04373379bb3aae2a233616461dcb9dcacec054e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a04e30f62da1f8f6257c5a4a5de9b7fd4e75a13e2c92126200ca29195d9d7b8"} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a69fb32a15195a7bc14676de04373379bb3aae2a233616461dcb9dcacec054e1"} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a"} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a"} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af"} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a"} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af"} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a"} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a"} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a"} {"level":"error","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a"} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a"} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0165785861be4f76a5b8182d660db904e22783f3871185361809b93a7dd1183a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0165785861be4f76a5b8182d660db904e22783f3871185361809b93a7dd1183a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0165785861be4f76a5b8182d660db904e22783f3871185361809b93a7dd1183a"} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0165785861be4f76a5b8182d660db904e22783f3871185361809b93a7dd1183a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0165785861be4f76a5b8182d660db904e22783f3871185361809b93a7dd1183a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0165785861be4f76a5b8182d660db904e22783f3871185361809b93a7dd1183a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247cc967428782f4387c9ef2111ed8788c818b229633dd285d6d868b71dc711b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247cc967428782f4387c9ef2111ed8788c818b229633dd285d6d868b71dc711b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0165785861be4f76a5b8182d660db904e22783f3871185361809b93a7dd1183a"} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0165785861be4f76a5b8182d660db904e22783f3871185361809b93a7dd1183a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247cc967428782f4387c9ef2111ed8788c818b229633dd285d6d868b71dc711b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247cc967428782f4387c9ef2111ed8788c818b229633dd285d6d868b71dc711b"} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247cc967428782f4387c9ef2111ed8788c818b229633dd285d6d868b71dc711b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"231d6e987192dd861f6fb647456423d0cce47bed7eb7770113c0b997a4581601","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"231d6e987192dd861f6fb647456423d0cce47bed7eb7770113c0b997a4581601","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a"} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247cc967428782f4387c9ef2111ed8788c818b229633dd285d6d868b71dc711b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["247cc967428782f4387c9ef2111ed8788c818b229633dd285d6d868b71dc711b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/231d6e987192dd861f6fb647456423d0cce47bed7eb7770113c0b997a4581601"} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247cc967428782f4387c9ef2111ed8788c818b229633dd285d6d868b71dc711b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"231d6e987192dd861f6fb647456423d0cce47bed7eb7770113c0b997a4581601","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["231d6e987192dd861f6fb647456423d0cce47bed7eb7770113c0b997a4581601"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0165785861be4f76a5b8182d660db904e22783f3871185361809b93a7dd1183a"} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"231d6e987192dd861f6fb647456423d0cce47bed7eb7770113c0b997a4581601","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5"} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247cc967428782f4387c9ef2111ed8788c818b229633dd285d6d868b71dc711b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247cc967428782f4387c9ef2111ed8788c818b229633dd285d6d868b71dc711b"} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247cc967428782f4387c9ef2111ed8788c818b229633dd285d6d868b71dc711b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"231d6e987192dd861f6fb647456423d0cce47bed7eb7770113c0b997a4581601","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247cc967428782f4387c9ef2111ed8788c818b229633dd285d6d868b71dc711b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["247cc967428782f4387c9ef2111ed8788c818b229633dd285d6d868b71dc711b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/231d6e987192dd861f6fb647456423d0cce47bed7eb7770113c0b997a4581601"} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247cc967428782f4387c9ef2111ed8788c818b229633dd285d6d868b71dc711b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"247cc967428782f4387c9ef2111ed8788c818b229633dd285d6d868b71dc711b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5"} {"level":"debug","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247cc967428782f4387c9ef2111ed8788c818b229633dd285d6d868b71dc711b"} {"level":"info","ts":"2026-08-05T18:14:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5"} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120"} {"level":"error","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120"} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120"} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8"} {"level":"error","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa"} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa"} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa"} {"level":"info","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb"} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55"} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb"} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5"} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5"} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5"} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5"} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:14:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"} {"level":"error","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec327bc7-f516-42fd-a7ed-667372cedaf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55766","PortSpecifier":{"PortValue":55766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec327bc7-f516-42fd-a7ed-667372cedaf5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec327bc7-f516-42fd-a7ed-667372cedaf5","object":"source:{address:{socket_address:{address:\"10.133.0.11:55766\" port_value:55766}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953699 nanos:412337306} http:{id:\"ec327bc7-f516-42fd-a7ed-667372cedaf5\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"67\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"ec327bc7-f516-42fd-a7ed-667372cedaf5\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec327bc7-f516-42fd-a7ed-667372cedaf5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec327bc7-f516-42fd-a7ed-667372cedaf5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec327bc7-f516-42fd-a7ed-667372cedaf5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ec327bc7-f516-42fd-a7ed-667372cedaf5"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"ec327bc7-f516-42fd-a7ed-667372cedaf5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":412337306,"seconds":1785953699}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55766},"address":"10.133.0.11:55766"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ec327bc7-f516-42fd-a7ed-667372cedaf5"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"ec327bc7-f516-42fd-a7ed-667372cedaf5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":412337306,"seconds":1785953699},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:55766","port":55766}}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec327bc7-f516-42fd-a7ed-667372cedaf5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec327bc7-f516-42fd-a7ed-667372cedaf5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec327bc7-f516-42fd-a7ed-667372cedaf5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/sub-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec327bc7-f516-42fd-a7ed-667372cedaf5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec327bc7-f516-42fd-a7ed-667372cedaf5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec327bc7-f516-42fd-a7ed-667372cedaf5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec327bc7-f516-42fd-a7ed-667372cedaf5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec327bc7-f516-42fd-a7ed-667372cedaf5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38570","PortSpecifier":{"PortValue":38570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e","object":"source:{address:{socket_address:{address:\"10.133.0.11:38570\" port_value:38570}}} destination:{address:{socket_address:{address:\"10.134.0.71:443\" port_value:443}}} request:{time:{seconds:1785953699 nanos:458141353} http:{id:\"4a46a571-ae89-4b2b-a3eb-a7bac865692e\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"67\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"4a46a571-ae89-4b2b-a3eb-a7bac865692e\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01OTRiNjUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdC05OTlkNDQ0NDgtbDdkYmgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItNTk0YjY1LW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":458141353,"seconds":1785953699}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38570},"address":"10.133.0.11:38570"}}}}},"destination":{"address":"10.134.0.71:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":458141353,"seconds":1785953699},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:38570","port":38570}}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-594b65/sub-test-model-594b65\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-594b65/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a46a571-ae89-4b2b-a3eb-a7bac865692e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55778","PortSpecifier":{"PortValue":55778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","object":"source:{address:{socket_address:{address:\"10.133.0.11:55778\" port_value:55778}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953699 nanos:497306101} http:{id:\"8ee7d633-5cd4-42d4-be91-afff31c9ce52\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"8ee7d633-5cd4-42d4-be91-afff31c9ce52\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VCLt7hl6Ra69jccm_mOxTO447nD1vfRAv4BcwjpanvfFH6RSZLmYmClCoWFg"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c66f789d-77e5-47f9-8e84-8897c913d50b","keyName":"e2e-sub-iso-6ce777","subscription":"e2e-a-only-cf53f0","tenant":"e2e-shared-a-ba69fc","userId":"c66f789d-77e5-47f9-8e84-8897c913d50b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":497306101,"seconds":1785953699}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55778},"address":"10.133.0.11:55778"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":497306101,"seconds":1785953699},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:55778","port":55778}}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/sub-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-cf53f0"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ee7d633-5cd4-42d4-be91-afff31c9ce52","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d842786d-6f00-45b0-8127-ac086f88a0fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38574","PortSpecifier":{"PortValue":38574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d842786d-6f00-45b0-8127-ac086f88a0fd","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d842786d-6f00-45b0-8127-ac086f88a0fd","object":"source:{address:{socket_address:{address:\"10.133.0.11:38574\" port_value:38574}}} destination:{address:{socket_address:{address:\"10.134.0.71:443\" port_value:443}}} request:{time:{seconds:1785953699 nanos:539075100} http:{id:\"d842786d-6f00-45b0-8127-ac086f88a0fd\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"d842786d-6f00-45b0-8127-ac086f88a0fd\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d842786d-6f00-45b0-8127-ac086f88a0fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HXg9XR42S7paVoVc_TMc2YeCTm22e5DEtEw7LV4Ljf85M9icGRTH0ZCaydzt"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d842786d-6f00-45b0-8127-ac086f88a0fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d842786d-6f00-45b0-8127-ac086f88a0fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cf784f18-dd70-4289-b392-7545deb97b3e","keyName":"e2e-sub-iso-a97361","subscription":"e2e-b-only-cf53f0","tenant":"e2e-shared-b-594b65","userId":"cf784f18-dd70-4289-b392-7545deb97b3e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d842786d-6f00-45b0-8127-ac086f88a0fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01OTRiNjUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdC05OTlkNDQ0NDgtbDdkYmgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItNTk0YjY1LW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d842786d-6f00-45b0-8127-ac086f88a0fd"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"d842786d-6f00-45b0-8127-ac086f88a0fd","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":539075100,"seconds":1785953699}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38574},"address":"10.133.0.11:38574"}}}}},"destination":{"address":"10.134.0.71:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d842786d-6f00-45b0-8127-ac086f88a0fd"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"d842786d-6f00-45b0-8127-ac086f88a0fd","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":539075100,"seconds":1785953699},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:38574","port":38574}}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d842786d-6f00-45b0-8127-ac086f88a0fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d842786d-6f00-45b0-8127-ac086f88a0fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d842786d-6f00-45b0-8127-ac086f88a0fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-594b65/sub-test-model-594b65\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-594b65/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d842786d-6f00-45b0-8127-ac086f88a0fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d842786d-6f00-45b0-8127-ac086f88a0fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d842786d-6f00-45b0-8127-ac086f88a0fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d842786d-6f00-45b0-8127-ac086f88a0fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-cf53f0"} {"level":"info","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d842786d-6f00-45b0-8127-ac086f88a0fd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:14:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d842786d-6f00-45b0-8127-ac086f88a0fd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:15:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5"} {"level":"info","ts":"2026-08-05T18:15:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:15:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120"} {"level":"info","ts":"2026-08-05T18:15:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8"} {"level":"info","ts":"2026-08-05T18:15:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa"} {"level":"info","ts":"2026-08-05T18:15:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"} {"level":"info","ts":"2026-08-05T18:15:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"info","ts":"2026-08-05T18:15:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:15:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb"} {"level":"info","ts":"2026-08-05T18:15:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53"} {"level":"info","ts":"2026-08-05T18:15:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:15:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55"} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55"} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55"} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb"} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55"} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb"} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb"} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8"} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb"} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8"} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8"} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb"} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8"} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"error","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120"} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa"} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"error","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"info","ts":"2026-08-05T18:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5"} {"level":"info","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"878cf225-d30c-45c7-822a-96e015240eed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43872","PortSpecifier":{"PortValue":43872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"878cf225-d30c-45c7-822a-96e015240eed","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"878cf225-d30c-45c7-822a-96e015240eed","object":"source:{address:{socket_address:{address:\"10.133.0.11:43872\" port_value:43872}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953723 nanos:23925355} http:{id:\"878cf225-d30c-45c7-822a-96e015240eed\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"71\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"878cf225-d30c-45c7-822a-96e015240eed\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"878cf225-d30c-45c7-822a-96e015240eed","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"878cf225-d30c-45c7-822a-96e015240eed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"878cf225-d30c-45c7-822a-96e015240eed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdC04NDhiOTRjNThkLXY4a3hwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"878cf225-d30c-45c7-822a-96e015240eed"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"878cf225-d30c-45c7-822a-96e015240eed","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":23925355,"seconds":1785953723}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":43872},"address":"10.133.0.11:43872"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdC04NDhiOTRjNThkLXY4a3hwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"878cf225-d30c-45c7-822a-96e015240eed"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"878cf225-d30c-45c7-822a-96e015240eed","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":23925355,"seconds":1785953723},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:43872","port":43872}}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"878cf225-d30c-45c7-822a-96e015240eed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"878cf225-d30c-45c7-822a-96e015240eed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"878cf225-d30c-45c7-822a-96e015240eed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/sub-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"878cf225-d30c-45c7-822a-96e015240eed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"878cf225-d30c-45c7-822a-96e015240eed","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"878cf225-d30c-45c7-822a-96e015240eed","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"878cf225-d30c-45c7-822a-96e015240eed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"878cf225-d30c-45c7-822a-96e015240eed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39772","PortSpecifier":{"PortValue":39772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0","object":"source:{address:{socket_address:{address:\"10.133.0.11:39772\" port_value:39772}}} destination:{address:{socket_address:{address:\"10.134.0.71:443\" port_value:443}}} request:{time:{seconds:1785953723 nanos:59889098} http:{id:\"f8eef5bf-3da3-9512-9be8-3faa6ea999b0\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"71\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"f8eef5bf-3da3-9512-9be8-3faa6ea999b0\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01OTRiNjUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdC05OTlkNDQ0NDgtbDdkYmgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItNTk0YjY1LW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":59889098,"seconds":1785953723}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":39772},"address":"10.133.0.11:39772"}}}}},"destination":{"address":"10.134.0.71:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":59889098,"seconds":1785953723},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:39772","port":39772}}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-594b65/sub-test-model-594b65\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-594b65/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8eef5bf-3da3-9512-9be8-3faa6ea999b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc96313a-c782-41e5-aa55-5636e82e13b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43876","PortSpecifier":{"PortValue":43876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc96313a-c782-41e5-aa55-5636e82e13b2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc96313a-c782-41e5-aa55-5636e82e13b2","object":"source:{address:{socket_address:{address:\"10.133.0.11:43876\" port_value:43876}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953723 nanos:98292437} http:{id:\"cc96313a-c782-41e5-aa55-5636e82e13b2\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"cc96313a-c782-41e5-aa55-5636e82e13b2\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc96313a-c782-41e5-aa55-5636e82e13b2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UBRPlfMzarN1sOHD_o6GWepJ47vCy6qopPlC0UVFGeAu0zeoK4UuG6oXGPFZ"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc96313a-c782-41e5-aa55-5636e82e13b2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc96313a-c782-41e5-aa55-5636e82e13b2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ae825573-199a-413d-a108-8296cbd75d28","keyName":"e2e-sub-iso-205a4b","subscription":"e2e-shared-sub-31f65e","tenant":"e2e-shared-a-ba69fc","userId":"ae825573-199a-413d-a108-8296cbd75d28","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc96313a-c782-41e5-aa55-5636e82e13b2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cc96313a-c782-41e5-aa55-5636e82e13b2"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"cc96313a-c782-41e5-aa55-5636e82e13b2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":98292437,"seconds":1785953723}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":43876},"address":"10.133.0.11:43876"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cc96313a-c782-41e5-aa55-5636e82e13b2"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"cc96313a-c782-41e5-aa55-5636e82e13b2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":98292437,"seconds":1785953723},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:43876","port":43876}}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc96313a-c782-41e5-aa55-5636e82e13b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc96313a-c782-41e5-aa55-5636e82e13b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc96313a-c782-41e5-aa55-5636e82e13b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/sub-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc96313a-c782-41e5-aa55-5636e82e13b2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc96313a-c782-41e5-aa55-5636e82e13b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc96313a-c782-41e5-aa55-5636e82e13b2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-31f65e"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc96313a-c782-41e5-aa55-5636e82e13b2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc96313a-c782-41e5-aa55-5636e82e13b2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc96313a-c782-41e5-aa55-5636e82e13b2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:39784","PortSpecifier":{"PortValue":39784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","object":"source:{address:{socket_address:{address:\"10.133.0.11:39784\" port_value:39784}}} destination:{address:{socket_address:{address:\"10.134.0.71:443\" port_value:443}}} request:{time:{seconds:1785953723 nanos:129464457} http:{id:\"41044a1f-2859-4b99-b1c9-093cec9e15b9\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"41044a1f-2859-4b99-b1c9-093cec9e15b9\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PCT1Ua7NqYu1lC8T_Fz9oxhzpSTB52bIplWrPRsI6b61irQPUMjFbKyAHdny"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1baddf8f-b1a8-4e90-8a0c-dd24c95c95b2","keyName":"e2e-sub-iso-a09e29","subscription":"e2e-shared-sub-31f65e","tenant":"e2e-shared-b-594b65","userId":"1baddf8f-b1a8-4e90-8a0c-dd24c95c95b2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"41044a1f-2859-4b99-b1c9-093cec9e15b9"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":129464457,"seconds":1785953723}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":39784},"address":"10.133.0.11:39784"}}}}},"destination":{"address":"10.134.0.71:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"41044a1f-2859-4b99-b1c9-093cec9e15b9"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":129464457,"seconds":1785953723},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:39784","port":39784}}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-594b65/sub-test-model-594b65\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-594b65/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-31f65e"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:15:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41044a1f-2859-4b99-b1c9-093cec9e15b9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6515b0a95e540651167f7b357e5383fa81ee020014b1fcbd51ee11198ddab18"} {"level":"info","ts":"2026-08-05T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50462edfb28d24c53cdca3020ed513e5da1ea66f4c94d445b4bd67126b9cf8f5"} {"level":"info","ts":"2026-08-05T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ce6a2e1d5eaf56f6d8cbf91dad69a1bbcbc8ba3b2ac710530cfc835e7d82100"} {"level":"info","ts":"2026-08-05T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a04e30f62da1f8f6257c5a4a5de9b7fd4e75a13e2c92126200ca29195d9d7b8"} {"level":"info","ts":"2026-08-05T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2160fcb85cb1ed010efa4cc4aca3c7602f67b81224dce563fa9fb8c71df5791e"} {"level":"info","ts":"2026-08-05T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a69fb32a15195a7bc14676de04373379bb3aae2a233616461dcb9dcacec054e1"} {"level":"info","ts":"2026-08-05T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"} {"level":"info","ts":"2026-08-05T18:15:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af"} {"level":"info","ts":"2026-08-05T18:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91c42b3e7ddfd7b65c5ee9166fe4402eabdd4157a24a3ca8a79470dbaf8414e8"} {"level":"info","ts":"2026-08-05T18:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acab2ac7966971976d18d549078d72c8fef6178101586fd31cb1272bae2aea53"} {"level":"info","ts":"2026-08-05T18:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/247cc967428782f4387c9ef2111ed8788c818b229633dd285d6d868b71dc711b"} {"level":"info","ts":"2026-08-05T18:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"info","ts":"2026-08-05T18:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/726f66c9b56b2df94dd3aaba7739470d80aa2b5fd02da670bfd46025e1268120"} {"level":"info","ts":"2026-08-05T18:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f00334014968365f00387f5a8fcaadaf044360411c3e97dcdcb9b5a7c9c820eb"} {"level":"info","ts":"2026-08-05T18:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25cba8ed4fbc30c690911312a54e97562681a9a1a3e65e16d409ff2b63366d55"} {"level":"info","ts":"2026-08-05T18:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a"} {"level":"info","ts":"2026-08-05T18:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b8006e441e23f571dc9b2ec8bc309b4ad9d278fe5018f5fc71d4adfe28692fa"} {"level":"info","ts":"2026-08-05T18:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1eade41f5e8d144ae9c875adf6e444e002400a802559b085c6d403d897467f5"} {"level":"info","ts":"2026-08-05T18:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a"} {"level":"info","ts":"2026-08-05T18:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/231d6e987192dd861f6fb647456423d0cce47bed7eb7770113c0b997a4581601"} {"level":"info","ts":"2026-08-05T18:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0165785861be4f76a5b8182d660db904e22783f3871185361809b93a7dd1183a"} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b7220d121f6bbd2335aecc5fb9fae49fa71b5b4d20f8ebaf90ae52d5c8a1230","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b7220d121f6bbd2335aecc5fb9fae49fa71b5b4d20f8ebaf90ae52d5c8a1230","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7220d121f6bbd2335aecc5fb9fae49fa71b5b4d20f8ebaf90ae52d5c8a1230","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b7220d121f6bbd2335aecc5fb9fae49fa71b5b4d20f8ebaf90ae52d5c8a1230"} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7220d121f6bbd2335aecc5fb9fae49fa71b5b4d20f8ebaf90ae52d5c8a1230","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b7220d121f6bbd2335aecc5fb9fae49fa71b5b4d20f8ebaf90ae52d5c8a1230"} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b7220d121f6bbd2335aecc5fb9fae49fa71b5b4d20f8ebaf90ae52d5c8a1230","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b7220d121f6bbd2335aecc5fb9fae49fa71b5b4d20f8ebaf90ae52d5c8a1230"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b7220d121f6bbd2335aecc5fb9fae49fa71b5b4d20f8ebaf90ae52d5c8a1230","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7220d121f6bbd2335aecc5fb9fae49fa71b5b4d20f8ebaf90ae52d5c8a1230","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b7220d121f6bbd2335aecc5fb9fae49fa71b5b4d20f8ebaf90ae52d5c8a1230"} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3b5fa717b718b3d16d3272adca5979e688c39057404b0e2f657f424bc7fa0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3b5fa717b718b3d16d3272adca5979e688c39057404b0e2f657f424bc7fa0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3b5fa717b718b3d16d3272adca5979e688c39057404b0e2f657f424bc7fa0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3b5fa717b718b3d16d3272adca5979e688c39057404b0e2f657f424bc7fa0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3b5fa717b718b3d16d3272adca5979e688c39057404b0e2f657f424bc7fa0b"} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3b5fa717b718b3d16d3272adca5979e688c39057404b0e2f657f424bc7fa0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3b5fa717b718b3d16d3272adca5979e688c39057404b0e2f657f424bc7fa0b"} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3b5fa717b718b3d16d3272adca5979e688c39057404b0e2f657f424bc7fa0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be3b5fa717b718b3d16d3272adca5979e688c39057404b0e2f657f424bc7fa0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3b5fa717b718b3d16d3272adca5979e688c39057404b0e2f657f424bc7fa0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3b5fa717b718b3d16d3272adca5979e688c39057404b0e2f657f424bc7fa0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e18d02b08c8f25b8a6afae9e0adf33b7eea18159fd5e63ef19f4df2cc5e82003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e18d02b08c8f25b8a6afae9e0adf33b7eea18159fd5e63ef19f4df2cc5e82003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3b5fa717b718b3d16d3272adca5979e688c39057404b0e2f657f424bc7fa0b"} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e18d02b08c8f25b8a6afae9e0adf33b7eea18159fd5e63ef19f4df2cc5e82003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18d02b08c8f25b8a6afae9e0adf33b7eea18159fd5e63ef19f4df2cc5e82003"} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e18d02b08c8f25b8a6afae9e0adf33b7eea18159fd5e63ef19f4df2cc5e82003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a"} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18d02b08c8f25b8a6afae9e0adf33b7eea18159fd5e63ef19f4df2cc5e82003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18d02b08c8f25b8a6afae9e0adf33b7eea18159fd5e63ef19f4df2cc5e82003"} {"level":"error","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e18d02b08c8f25b8a6afae9e0adf33b7eea18159fd5e63ef19f4df2cc5e82003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e18d02b08c8f25b8a6afae9e0adf33b7eea18159fd5e63ef19f4df2cc5e82003"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e18d02b08c8f25b8a6afae9e0adf33b7eea18159fd5e63ef19f4df2cc5e82003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e18d02b08c8f25b8a6afae9e0adf33b7eea18159fd5e63ef19f4df2cc5e82003","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324dfe0b07e967c58cdd046af1c5848db07464ff0deea01c74a61ab6526e8276","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a"} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324dfe0b07e967c58cdd046af1c5848db07464ff0deea01c74a61ab6526e8276","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324dfe0b07e967c58cdd046af1c5848db07464ff0deea01c74a61ab6526e8276","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324dfe0b07e967c58cdd046af1c5848db07464ff0deea01c74a61ab6526e8276","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e18d02b08c8f25b8a6afae9e0adf33b7eea18159fd5e63ef19f4df2cc5e82003"} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324dfe0b07e967c58cdd046af1c5848db07464ff0deea01c74a61ab6526e8276","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324dfe0b07e967c58cdd046af1c5848db07464ff0deea01c74a61ab6526e8276"} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324dfe0b07e967c58cdd046af1c5848db07464ff0deea01c74a61ab6526e8276","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324dfe0b07e967c58cdd046af1c5848db07464ff0deea01c74a61ab6526e8276","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324dfe0b07e967c58cdd046af1c5848db07464ff0deea01c74a61ab6526e8276"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324dfe0b07e967c58cdd046af1c5848db07464ff0deea01c74a61ab6526e8276","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324dfe0b07e967c58cdd046af1c5848db07464ff0deea01c74a61ab6526e8276","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a"} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324dfe0b07e967c58cdd046af1c5848db07464ff0deea01c74a61ab6526e8276"} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a"} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af"} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a"} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af"} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f"} {"level":"debug","ts":"2026-08-05T18:16:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f"} {"level":"debug","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f"} {"level":"debug","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f"} {"level":"debug","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfb4ff1a762a6cd3d921f131a7b55a3f62d29b435095492404d71701833de43c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfb4ff1a762a6cd3d921f131a7b55a3f62d29b435095492404d71701833de43c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfb4ff1a762a6cd3d921f131a7b55a3f62d29b435095492404d71701833de43c"} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfb4ff1a762a6cd3d921f131a7b55a3f62d29b435095492404d71701833de43c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfb4ff1a762a6cd3d921f131a7b55a3f62d29b435095492404d71701833de43c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a"} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfb4ff1a762a6cd3d921f131a7b55a3f62d29b435095492404d71701833de43c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfb4ff1a762a6cd3d921f131a7b55a3f62d29b435095492404d71701833de43c"} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c"} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfb4ff1a762a6cd3d921f131a7b55a3f62d29b435095492404d71701833de43c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a"} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfb4ff1a762a6cd3d921f131a7b55a3f62d29b435095492404d71701833de43c"} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f"} {"level":"info","ts":"2026-08-05T18:16:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c"} {"level":"debug","ts":"2026-08-05T18:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b"} {"level":"debug","ts":"2026-08-05T18:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b"} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b"} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b"} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed"} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed"} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2"} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"debug","ts":"2026-08-05T18:16:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"error","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"} {"level":"info","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55166","PortSpecifier":{"PortValue":55166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a","object":"source:{address:{socket_address:{address:\"10.133.0.11:55166\" port_value:55166}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953815 nanos:688055494} http:{id:\"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":688055494,"seconds":1785953815}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55166},"address":"10.133.0.11:55166"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":688055494,"seconds":1785953815},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:55166","port":55166}}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed6bc70a-2764-4e46-9f8f-9c06a1521d8a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57b2d111-233d-4436-9cfd-d42ae7d8417d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55086","PortSpecifier":{"PortValue":55086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57b2d111-233d-4436-9cfd-d42ae7d8417d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57b2d111-233d-4436-9cfd-d42ae7d8417d","object":"source:{address:{socket_address:{address:\"10.133.0.11:55086\" port_value:55086}}} destination:{address:{socket_address:{address:\"10.134.0.71:443\" port_value:443}}} request:{time:{seconds:1785953815 nanos:738281403} http:{id:\"57b2d111-233d-4436-9cfd-d42ae7d8417d\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"57b2d111-233d-4436-9cfd-d42ae7d8417d\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57b2d111-233d-4436-9cfd-d42ae7d8417d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57b2d111-233d-4436-9cfd-d42ae7d8417d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57b2d111-233d-4436-9cfd-d42ae7d8417d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"57b2d111-233d-4436-9cfd-d42ae7d8417d"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"57b2d111-233d-4436-9cfd-d42ae7d8417d","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":738281403,"seconds":1785953815}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55086},"address":"10.133.0.11:55086"}}}}},"destination":{"address":"10.134.0.71:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"57b2d111-233d-4436-9cfd-d42ae7d8417d"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"57b2d111-233d-4436-9cfd-d42ae7d8417d","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":738281403,"seconds":1785953815},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:55086","port":55086}}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57b2d111-233d-4436-9cfd-d42ae7d8417d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57b2d111-233d-4436-9cfd-d42ae7d8417d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57b2d111-233d-4436-9cfd-d42ae7d8417d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-594b65/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57b2d111-233d-4436-9cfd-d42ae7d8417d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57b2d111-233d-4436-9cfd-d42ae7d8417d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57b2d111-233d-4436-9cfd-d42ae7d8417d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57b2d111-233d-4436-9cfd-d42ae7d8417d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57b2d111-233d-4436-9cfd-d42ae7d8417d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55174","PortSpecifier":{"PortValue":55174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be89fff6-c443-4616-a0b6-5173fb2e493a","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","object":"source:{address:{socket_address:{address:\"10.133.0.11:55174\" port_value:55174}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953815 nanos:790337703} http:{id:\"be89fff6-c443-4616-a0b6-5173fb2e493a\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"be89fff6-c443-4616-a0b6-5173fb2e493a\"} path:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tCc5zneQPdQb96KO_jdYQuFun3bWB0nM2jeSh2LgSI5ry4orkibRayKrgjQb"} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"937209b1-94cc-4505-a196-655a09dee877","keyName":"e2e-rate-a-731242","subscription":"e2e-rate-iso-a-731242","tenant":"e2e-shared-a-ba69fc","userId":"937209b1-94cc-4505-a196-655a09dee877","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-731242","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"be89fff6-c443-4616-a0b6-5173fb2e493a"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"be89fff6-c443-4616-a0b6-5173fb2e493a","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":790337703,"seconds":1785953815}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55174},"address":"10.133.0.11:55174"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"be89fff6-c443-4616-a0b6-5173fb2e493a"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"be89fff6-c443-4616-a0b6-5173fb2e493a","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":790337703,"seconds":1785953815},"url_path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:55174","port":55174}}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-731242"} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"937209b1-94cc-4505-a196-655a09dee877","keyName":"e2e-rate-a-731242","selected_subscription":"e2e-rate-iso-a-731242","selected_subscription_key":"ai-tenant-e2e-shared-a-ba69fc/e2e-rate-iso-a-731242@ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-731242","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:16:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be89fff6-c443-4616-a0b6-5173fb2e493a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55186","PortSpecifier":{"PortValue":55186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","object":"source:{address:{socket_address:{address:\"10.133.0.11:55186\" port_value:55186}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953816 nanos:882068247} http:{id:\"956d723f-dbbe-4b11-b9b0-c9534f0a14fa\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"956d723f-dbbe-4b11-b9b0-c9534f0a14fa\"} path:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tCc5zneQPdQb96KO_jdYQuFun3bWB0nM2jeSh2LgSI5ry4orkibRayKrgjQb"} {"level":"debug","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"937209b1-94cc-4505-a196-655a09dee877","keyName":"e2e-rate-a-731242","subscription":"e2e-rate-iso-a-731242","tenant":"e2e-shared-a-ba69fc","userId":"937209b1-94cc-4505-a196-655a09dee877","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-731242","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"}} {"level":"debug","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":882068247,"seconds":1785953816}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55186},"address":"10.133.0.11:55186"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":882068247,"seconds":1785953816},"url_path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:55186","port":55186}}} {"level":"debug","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-731242"} {"level":"debug","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"937209b1-94cc-4505-a196-655a09dee877","keyName":"e2e-rate-a-731242","selected_subscription":"e2e-rate-iso-a-731242","selected_subscription_key":"ai-tenant-e2e-shared-a-ba69fc/e2e-rate-iso-a-731242@ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-731242","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:16:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"956d723f-dbbe-4b11-b9b0-c9534f0a14fa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55198","PortSpecifier":{"PortValue":55198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","object":"source:{address:{socket_address:{address:\"10.133.0.11:55198\" port_value:55198}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953817 nanos:924344164} http:{id:\"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0\"} path:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tCc5zneQPdQb96KO_jdYQuFun3bWB0nM2jeSh2LgSI5ry4orkibRayKrgjQb"} {"level":"debug","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"937209b1-94cc-4505-a196-655a09dee877","keyName":"e2e-rate-a-731242","subscription":"e2e-rate-iso-a-731242","tenant":"e2e-shared-a-ba69fc","userId":"937209b1-94cc-4505-a196-655a09dee877","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-731242","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"}} {"level":"debug","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":924344164,"seconds":1785953817}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55198},"address":"10.133.0.11:55198"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":924344164,"seconds":1785953817},"url_path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:55198","port":55198}}} {"level":"debug","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-731242"} {"level":"debug","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"937209b1-94cc-4505-a196-655a09dee877","keyName":"e2e-rate-a-731242","selected_subscription":"e2e-rate-iso-a-731242","selected_subscription_key":"ai-tenant-e2e-shared-a-ba69fc/e2e-rate-iso-a-731242@ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-731242","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:16:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e002dfe-a9d7-4abc-a97a-fdf9afc152e0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b"} {"level":"info","ts":"2026-08-05T18:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2"} {"level":"info","ts":"2026-08-05T18:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0"} {"level":"info","ts":"2026-08-05T18:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"} {"level":"info","ts":"2026-08-05T18:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed"} {"level":"info","ts":"2026-08-05T18:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"info","ts":"2026-08-05T18:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"} {"level":"info","ts":"2026-08-05T18:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"info","ts":"2026-08-05T18:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"} {"level":"debug","ts":"2026-08-05T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"info","ts":"2026-08-05T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"} {"level":"error","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"error","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed"} {"level":"error","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"error","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"error","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0"} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:17:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0"} {"level":"info","ts":"2026-08-05T18:17:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36658","PortSpecifier":{"PortValue":36658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","object":"source:{address:{socket_address:{address:\"10.133.0.11:36658\" port_value:36658}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953839 nanos:989255702} http:{id:\"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdC04NDhiOTRjNThkLXY4a3hwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":989255702,"seconds":1785953839}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36658},"address":"10.133.0.11:36658"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdC04NDhiOTRjNThkLXY4a3hwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":989255702,"seconds":1785953839},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:36658","port":36658}}} {"level":"debug","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ecc7ad9-f710-4d45-b2a6-2ac23f4e1b28","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47974","PortSpecifier":{"PortValue":47974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","object":"source:{address:{socket_address:{address:\"10.133.0.11:47974\" port_value:47974}}} destination:{address:{socket_address:{address:\"10.134.0.71:443\" port_value:443}}} request:{time:{seconds:1785953840 nanos:27775671} http:{id:\"cb660c6b-aae7-42b9-af21-1b66a0a71cb5\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01OTRiNjUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdC05OTlkNDQ0NDgtbDdkYmgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItNTk0YjY1LW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"cb660c6b-aae7-42b9-af21-1b66a0a71cb5\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":27775671,"seconds":1785953840}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47974},"address":"10.133.0.11:47974"}}}}},"destination":{"address":"10.134.0.71:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"},"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":27775671,"seconds":1785953840},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:47974","port":47974}}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-594b65/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb660c6b-aae7-42b9-af21-1b66a0a71cb5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36672","PortSpecifier":{"PortValue":36672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","object":"source:{address:{socket_address:{address:\"10.133.0.11:36672\" port_value:36672}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953840 nanos:79109812} http:{id:\"5065ca61-76fe-480f-be3c-c964b6ae7e06\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdC04NDhiOTRjNThkLXY4a3hwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"5065ca61-76fe-480f-be3c-c964b6ae7e06\"} path:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BmY0Ov8EODHV5p07_MTDTgi4riJXpu22y8Gmjsto0UOpwnLAe7g4gehiO8Xm"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","keyName":"e2e-rate-a-586562","subscription":"e2e-rate-iso-a-586562","tenant":"e2e-shared-a-ba69fc","userId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-586562","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"5065ca61-76fe-480f-be3c-c964b6ae7e06"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":79109812,"seconds":1785953840}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36672},"address":"10.133.0.11:36672"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdC04NDhiOTRjNThkLXY4a3hwCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWJhNjlmYy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1iYTY5ZmMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"5065ca61-76fe-480f-be3c-c964b6ae7e06"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":79109812,"seconds":1785953840},"url_path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:36672","port":36672}}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-586562"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","keyName":"e2e-rate-a-586562","selected_subscription":"e2e-rate-iso-a-586562","selected_subscription_key":"ai-tenant-e2e-shared-a-ba69fc/e2e-rate-iso-a-586562@ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-586562","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:17:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5065ca61-76fe-480f-be3c-c964b6ae7e06","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36674","PortSpecifier":{"PortValue":36674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","object":"source:{address:{socket_address:{address:\"10.133.0.11:36674\" port_value:36674}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953841 nanos:122625574} http:{id:\"7723a87f-efb1-4bbf-8c41-190984f97d4c\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"7723a87f-efb1-4bbf-8c41-190984f97d4c\"} path:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BmY0Ov8EODHV5p07_MTDTgi4riJXpu22y8Gmjsto0UOpwnLAe7g4gehiO8Xm"} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","keyName":"e2e-rate-a-586562","subscription":"e2e-rate-iso-a-586562","tenant":"e2e-shared-a-ba69fc","userId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-586562","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"}} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"7723a87f-efb1-4bbf-8c41-190984f97d4c"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":122625574,"seconds":1785953841}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36674},"address":"10.133.0.11:36674"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"7723a87f-efb1-4bbf-8c41-190984f97d4c"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":122625574,"seconds":1785953841},"url_path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:36674","port":36674}}} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-586562"} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","keyName":"e2e-rate-a-586562","selected_subscription":"e2e-rate-iso-a-586562","selected_subscription_key":"ai-tenant-e2e-shared-a-ba69fc/e2e-rate-iso-a-586562@ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-586562","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:17:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7723a87f-efb1-4bbf-8c41-190984f97d4c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80f88271-9f5c-4377-87db-7403e9145b57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38776","PortSpecifier":{"PortValue":38776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80f88271-9f5c-4377-87db-7403e9145b57","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80f88271-9f5c-4377-87db-7403e9145b57","object":"source:{address:{socket_address:{address:\"10.133.0.11:38776\" port_value:38776}}} destination:{address:{socket_address:{address:\"10.132.0.73:443\" port_value:443}}} request:{time:{seconds:1785953842 nanos:161324627} http:{id:\"80f88271-9f5c-4377-87db-7403e9145b57\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"80f88271-9f5c-4377-87db-7403e9145b57\"} path:\"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions\" host:\"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BmY0Ov8EODHV5p07_MTDTgi4riJXpu22y8Gmjsto0UOpwnLAe7g4gehiO8Xm"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","keyName":"e2e-rate-a-586562","subscription":"e2e-rate-iso-a-586562","tenant":"e2e-shared-a-ba69fc","userId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ba69fc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-586562","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80f88271-9f5c-4377-87db-7403e9145b57","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"80f88271-9f5c-4377-87db-7403e9145b57"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"80f88271-9f5c-4377-87db-7403e9145b57","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":161324627,"seconds":1785953842}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38776},"address":"10.133.0.11:38776"}}}}},"destination":{"address":"10.132.0.73:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c"},"headers":{":authority":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ba69fc-kserve-workload-svc.ai-tenant-e2e-shared-a-ba69fc.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.73~e2e-shared-a-ba69fc-openshift-default-848b94c58d-v8kxp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"80f88271-9f5c-4377-87db-7403e9145b57"},"host":"e2e-shared-a-ba69fc.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"80f88271-9f5c-4377-87db-7403e9145b57","method":"POST","path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":161324627,"seconds":1785953842},"url_path":"/ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:38776","port":38776}}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-586562"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80f88271-9f5c-4377-87db-7403e9145b57","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"64007dfd-d00d-47bd-adc8-12bb9ed13a30","keyName":"e2e-rate-a-586562","selected_subscription":"e2e-rate-iso-a-586562","selected_subscription_key":"ai-tenant-e2e-shared-a-ba69fc/e2e-rate-iso-a-586562@ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ba69fc/models/facebook/opt-125m","name":"rate-test-model-ba69fc","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-586562","namespace":"ai-tenant-e2e-shared-a-ba69fc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ba69fc/rate-test-model-ba69fc"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80f88271-9f5c-4377-87db-7403e9145b57","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80f88271-9f5c-4377-87db-7403e9145b57","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:54420","PortSpecifier":{"PortValue":54420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","method":"POST","path":"/ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65/v1/completions","host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","object":"source:{address:{socket_address:{address:\"10.133.0.11:54420\" port_value:54420}}} destination:{address:{socket_address:{address:\"10.134.0.71:443\" port_value:443}}} request:{time:{seconds:1785953842 nanos:198491959} http:{id:\"b59f996d-2cb2-48dd-aba0-54965549ee6a\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-594b65-kserve-workload-svc.ai-tenant-e2e-shared-b-594b65.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"b59f996d-2cb2-48dd-aba0-54965549ee6a\"} path:\"/ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65/v1/completions\" host:\"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YJPiTcsOy8Gbh9XM_U43x0kR7Fi19QQU44xtkhJo1205zj9gkcG8zkc3zpai"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f6ef261a-4a98-4e13-9f4b-40410928b0f8","keyName":"e2e-rate-b-586562","subscription":"e2e-rate-iso-b-586562","tenant":"e2e-shared-b-594b65","userId":"f6ef261a-4a98-4e13-9f4b-40410928b0f8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-594b65.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-594b65/models/facebook/opt-125m","name":"rate-test-model-594b65","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-586562","namespace":"ai-tenant-e2e-shared-b-594b65","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65"}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-594b65-kserve-workload-svc.ai-tenant-e2e-shared-b-594b65.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01OTRiNjUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdC05OTlkNDQ0NDgtbDdkYmgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItNTk0YjY1LW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTU5NGI2NS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"b59f996d-2cb2-48dd-aba0-54965549ee6a"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","method":"POST","path":"/ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":198491959,"seconds":1785953842}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":54420},"address":"10.133.0.11:54420"}}}}},"destination":{"address":"10.134.0.71:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"},"headers":{":authority":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-594b65-kserve-workload-svc.ai-tenant-e2e-shared-b-594b65.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.71~e2e-shared-b-594b65-openshift-default-999d44448-l7dbh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"b59f996d-2cb2-48dd-aba0-54965549ee6a"},"host":"e2e-shared-b-594b65.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","method":"POST","path":"/ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":198491959,"seconds":1785953842},"url_path":"/ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:54420","port":54420}}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-594b65/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-586562"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f6ef261a-4a98-4e13-9f4b-40410928b0f8","keyName":"e2e-rate-b-586562","selected_subscription":"e2e-rate-iso-b-586562","selected_subscription_key":"ai-tenant-e2e-shared-b-594b65/e2e-rate-iso-b-586562@ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-594b65/models/facebook/opt-125m","name":"rate-test-model-594b65","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-586562","namespace":"ai-tenant-e2e-shared-b-594b65","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-594b65/rate-test-model-594b65"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:17:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b59f996d-2cb2-48dd-aba0-54965549ee6a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a35bea5ba522fc11a1843b48775c458adca1edf4b619b889a5c5f11d15f09eb2"} {"level":"info","ts":"2026-08-05T18:17:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9aba4ae44ae66869dd618047d8ce709e9632670cb23e6018ede76c9a3a49009b"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/618a416e27e90e0fc1ce90f46944f7e82ba49ac4493baa10e89c2a4253d993b2"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/324dfe0b07e967c58cdd046af1c5848db07464ff0deea01c74a61ab6526e8276"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35dd42789d51bae57b5a7e034c602fe08a00bb2ded8b9c23887329fc9418364a"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f809c5a59357c4447af65af262ed2dbda9f59fa22eaf62173ca131e89ebf4100"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0971a9a728158e88e396bc0bbb8c8295abefcf88fb914e641c8c267a42e5505"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be3b5fa717b718b3d16d3272adca5979e688c39057404b0e2f657f424bc7fa0b"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e18d02b08c8f25b8a6afae9e0adf33b7eea18159fd5e63ef19f4df2cc5e82003"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfb4ff1a762a6cd3d921f131a7b55a3f62d29b435095492404d71701833de43c"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85a82bc109d601c97d3a652685db39338e718a34c147fce66bc7b229f193efed"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0b592ce37506bf59a47eaeb98345e32c01a05dcef8630e3a1a12dd989a92e48"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bd251aa97dffcd1cc9782ae7f39b755b4e6961f061837462fd3907cf5d3511b"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1a0f8bf51bad16ea83bc82b47d784c2225968a10724692428cfd83a7c6c13b2"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dd1b7ae51be24b472dcce4778331d219558b74c246a76d0ba53f3676908963f"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cb1f5aeba18cd652876e87fae455df809c75d2f761f4fb5966d10ddb883ca9a"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b7220d121f6bbd2335aecc5fb9fae49fa71b5b4d20f8ebaf90ae52d5c8a1230"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60ed949d45bf2155221c98887bea90bd015d30b6390b175c51f5398ad003ea7b"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/788c2c646fdf2ab8008de5eb9de6993ee6b89f087d055c1fc65a1668c797f6b9"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4887ebb1cc0b8bea7d36501f68c2a097d4ffb02cc60ade731920e130ff16fdd0"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad3dc61ef6fa659489ca909efedcb95f70c87c7da9c7f29f03c64aad2b34e96a"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9876d9e00195f8e7089eb09c59bbfb7c6c8c7105b7dfb29d547b17a01906969c"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ea119bd4166bc0dc12fc86b5ba865207ffed365608fda7322c01315e7bade1a"} {"level":"info","ts":"2026-08-05T18:17:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7df79d11092807b8a2872c77aa92730e0a786acbfa8cd3ad8e6030e83a4ef8af"} {"level":"info","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35866","PortSpecifier":{"PortValue":35866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d5090db-2cdb-4d92-8a38-954970474ddd","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","object":"source:{address:{socket_address:{address:\"10.133.0.11:35866\" port_value:35866}}} destination:{address:{socket_address:{address:\"10.132.0.28:443\" port_value:443}}} request:{time:{seconds:1785953925 nanos:264435590} http:{id:\"5d5090db-2cdb-4d92-8a38-954970474ddd\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"69\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTZjeng1CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.28~maas-default-gateway-openshift-default-78bb78ff78-6czx5.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"5d5090db-2cdb-4d92-8a38-954970474ddd\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=34.228.250.194;host=maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.28~maas-default-gateway-openshift-default-78bb78ff78-6czx5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5d5090db-2cdb-4d92-8a38-954970474ddd"},"host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"5d5090db-2cdb-4d92-8a38-954970474ddd","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":264435590,"seconds":1785953925}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35866},"address":"10.133.0.11:35866"}}}}},"destination":{"address":"10.132.0.28:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=34.228.250.194;host=maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.28~maas-default-gateway-openshift-default-78bb78ff78-6czx5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5d5090db-2cdb-4d92-8a38-954970474ddd"},"host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"5d5090db-2cdb-4d92-8a38-954970474ddd","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":264435590,"seconds":1785953925},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:35866","port":35866}}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d5090db-2cdb-4d92-8a38-954970474ddd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35878","PortSpecifier":{"PortValue":35878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.28:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ac69df82-cc5d-498b-a18b-28a760bdee29","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","object":"source:{address:{socket_address:{address:\"10.133.0.11:35878\" port_value:35878}}} destination:{address:{socket_address:{address:\"10.132.0.28:443\" port_value:443}}} request:{time:{seconds:1785953925 nanos:309594389} http:{id:\"ac69df82-cc5d-498b-a18b-28a760bdee29\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.28~maas-default-gateway-openshift-default-78bb78ff78-6czx5.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"ac69df82-cc5d-498b-a18b-28a760bdee29\"} path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\" host:\"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OOzEJPB0zhCFSlk3_48Kjq4psJQfZo2S7nj040V0vuNbn9JtW4skjjAhJzYw"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d9bcd5b-dcc2-47a7-83a4-a346dd2a477c","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"0d9bcd5b-dcc2-47a7-83a4-a346dd2a477c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.28:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.28~maas-default-gateway-openshift-default-78bb78ff78-6czx5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"ac69df82-cc5d-498b-a18b-28a760bdee29"},"host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"ac69df82-cc5d-498b-a18b-28a760bdee29","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":309594389,"seconds":1785953925}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35878},"address":"10.133.0.11:35878"}}}}},"destination":{"address":"10.132.0.28:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.28~maas-default-gateway-openshift-default-78bb78ff78-6czx5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"ac69df82-cc5d-498b-a18b-28a760bdee29"},"host":"maas.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"ac69df82-cc5d-498b-a18b-28a760bdee29","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":309594389,"seconds":1785953925},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:35878","port":35878}}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d9bcd5b-dcc2-47a7-83a4-a346dd2a477c","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:18:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac69df82-cc5d-498b-a18b-28a760bdee29","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"error","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68"} {"level":"error","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68"} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9"} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd"} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd"} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e"} {"level":"error","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e"} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbe510571c5ee07cbf9c07318e5294349fd33578c12fd86edac96a5934ecc2ff"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbe510571c5ee07cbf9c07318e5294349fd33578c12fd86edac96a5934ecc2ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbe510571c5ee07cbf9c07318e5294349fd33578c12fd86edac96a5934ecc2ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518976d95bbe67110a41020bd9d9f2e2841fcb4ceac6ba77d914f8d36203e793"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbe510571c5ee07cbf9c07318e5294349fd33578c12fd86edac96a5934ecc2ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbe510571c5ee07cbf9c07318e5294349fd33578c12fd86edac96a5934ecc2ff"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518976d95bbe67110a41020bd9d9f2e2841fcb4ceac6ba77d914f8d36203e793","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["518976d95bbe67110a41020bd9d9f2e2841fcb4ceac6ba77d914f8d36203e793"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518976d95bbe67110a41020bd9d9f2e2841fcb4ceac6ba77d914f8d36203e793","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518976d95bbe67110a41020bd9d9f2e2841fcb4ceac6ba77d914f8d36203e793"} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbe510571c5ee07cbf9c07318e5294349fd33578c12fd86edac96a5934ecc2ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518976d95bbe67110a41020bd9d9f2e2841fcb4ceac6ba77d914f8d36203e793","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5"} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5"} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5"} {"level":"info","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55394","PortSpecifier":{"PortValue":55394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4c88229-7bf4-4dd4-8757-765a10207480","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","object":"source:{address:{socket_address:{address:\"10.133.0.11:55394\" port_value:55394}}} destination:{address:{socket_address:{address:\"10.134.0.76:443\" port_value:443}}} request:{time:{seconds:1785953998 nanos:741188704} http:{id:\"e4c88229-7bf4-4dd4-8757-765a10207480\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-ipp-a-6427fe.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.76~e2e-ipp-a-6427fe-openshift-default-7f7ddbf97d-hrhcl.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"e4c88229-7bf4-4dd4-8757-765a10207480\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/78484fb83cf8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=254b046d-798f-4387-832d-5138576cc40e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea973cef-0eec-45bb-9ab1-671e25ee6c20","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-6427fe.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.76~e2e-ipp-a-6427fe-openshift-default-7f7ddbf97d-hrhcl.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e4c88229-7bf4-4dd4-8757-765a10207480"},"host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"e4c88229-7bf4-4dd4-8757-765a10207480","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":741188704,"seconds":1785953998}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55394},"address":"10.133.0.11:55394"}}}}},"destination":{"address":"10.134.0.76:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363"},"headers":{":authority":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-6427fe.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS02NDI3ZmUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTY0MjdmZS1vcGVuc2hpZnQtZGVmYXVsdC03ZjdkZGJmOTdkLWhyaGNsCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTY0MjdmZS1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS02NDI3ZmUtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.76~e2e-ipp-a-6427fe-openshift-default-7f7ddbf97d-hrhcl.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e4c88229-7bf4-4dd4-8757-765a10207480"},"host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"e4c88229-7bf4-4dd4-8757-765a10207480","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":741188704,"seconds":1785953998},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:55394","port":55394}}} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-6427fe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:19:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4c88229-7bf4-4dd4-8757-765a10207480","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55408","PortSpecifier":{"PortValue":55408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","method":"POST","path":"/ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe/v1/chat/completions","host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","object":"source:{address:{socket_address:{address:\"10.133.0.11:55408\" port_value:55408}}} destination:{address:{socket_address:{address:\"10.134.0.76:443\" port_value:443}}} request:{time:{seconds:1785954000 nanos:803964337} http:{id:\"4f8a67b8-5029-4c37-894e-2221bb8f6c02\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"ipp-route-6427fe-kserve-workload-svc.ai-tenant-e2e-ipp-a-6427fe.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.76~e2e-ipp-a-6427fe-openshift-default-7f7ddbf97d-hrhcl.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"4f8a67b8-5029-4c37-894e-2221bb8f6c02\"} path:\"/ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe/v1/chat/completions\" host:\"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-22LjxGgXRIXSGnrL_P1E6S8p2QMxHSroJyZiot3ZW7g8YqbJc3kHsMRLEJIG"} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-6427fe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-6427fe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"957f4e9b-10fc-4404-be6a-04b3f72383bd","keyName":"e2e-ipp-6427fe","subscription":"ipp-route-6427fe-sub","tenant":"e2e-ipp-a-6427fe","userId":"957f4e9b-10fc-4404-be6a-04b3f72383bd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-6427fe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-6427fe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-6427fe/models/facebook/opt-125m","name":"ipp-route-6427fe","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-6427fe-sub","namespace":"ai-tenant-e2e-ipp-a-6427fe","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe"}} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-6427fe-kserve-workload-svc.ai-tenant-e2e-ipp-a-6427fe.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.76~e2e-ipp-a-6427fe-openshift-default-7f7ddbf97d-hrhcl.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02"},"host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","method":"POST","path":"/ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":803964337,"seconds":1785954000}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55408},"address":"10.133.0.11:55408"}}}}},"destination":{"address":"10.134.0.76:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"},"headers":{":authority":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-6427fe-kserve-workload-svc.ai-tenant-e2e-ipp-a-6427fe.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.76~e2e-ipp-a-6427fe-openshift-default-7f7ddbf97d-hrhcl.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.133.0.11","x-forwarded-host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02"},"host":"e2e-ipp-a-6427fe.apps.2bef611f-8613-4bd6-a7c6-78484fb83cf8.prod.konfluxeaas.com","id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","method":"POST","path":"/ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":803964337,"seconds":1785954000},"url_path":"/ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:55408","port":55408}}} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-6427fe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-6427fe-sub"} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"957f4e9b-10fc-4404-be6a-04b3f72383bd","keyName":"e2e-ipp-6427fe","selected_subscription":"ipp-route-6427fe-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe-sub@ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-6427fe/models/facebook/opt-125m","name":"ipp-route-6427fe","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-6427fe-sub","namespace":"ai-tenant-e2e-ipp-a-6427fe","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-6427fe/ipp-route-6427fe"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T18:20:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f8a67b8-5029-4c37-894e-2221bb8f6c02","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3333bbc39bfc3111b354a6bb49d5e6ce5456a26cb83c57b66a9b22982c82f9b5"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/648d109481e00b0400727dfa78d5f6949d5ee092005affc73633719f285f38fd"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/440c524ff4d6ad3d8ffc83956f9f2834abd3b5f4ca91d2c3f6ed5aecd09aefb9"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/518976d95bbe67110a41020bd9d9f2e2841fcb4ceac6ba77d914f8d36203e793"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65a977285a88392d12fa4471fb430bac35ed54198b018e1d0940fd152675dfe2"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbe510571c5ee07cbf9c07318e5294349fd33578c12fd86edac96a5934ecc2ff"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25d8101ae6d9ac6e09fb820994f2a95620206994b252fcf82e9bcddbe6a188af"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5b66df41aae566740a02dc45a308c87cb24870364203fc8dc142dc929cd5e68"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9f702c7a09a18ac79f3627f9ae8bbeced2f965ad044b244c3cc27f3e0fdaf6c"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d993e39adbb83111c59bba0dd69ebab7889d3186c408d2af87e63aae929e647e"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4f3171b667d5915e06af61b3719d1e62661ff5cefd53a52fb7d73241a8bd363"} {"level":"info","ts":"2026-08-05T18:21:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b30f282e7dab59fa7c24a92a3d9ad83b0c9aa41a68258e6e70713e8650285da"}