--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"} {"level":"error","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1"} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b10d9f66d444f5e36d3c0ada554fdb6601be7a6d84704d1a6641eae64f555a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b10d9f66d444f5e36d3c0ada554fdb6601be7a6d84704d1a6641eae64f555a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b10d9f66d444f5e36d3c0ada554fdb6601be7a6d84704d1a6641eae64f555a6"} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b10d9f66d444f5e36d3c0ada554fdb6601be7a6d84704d1a6641eae64f555a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b10d9f66d444f5e36d3c0ada554fdb6601be7a6d84704d1a6641eae64f555a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1"} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b10d9f66d444f5e36d3c0ada554fdb6601be7a6d84704d1a6641eae64f555a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b10d9f66d444f5e36d3c0ada554fdb6601be7a6d84704d1a6641eae64f555a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b10d9f66d444f5e36d3c0ada554fdb6601be7a6d84704d1a6641eae64f555a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b10d9f66d444f5e36d3c0ada554fdb6601be7a6d84704d1a6641eae64f555a6"} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b10d9f66d444f5e36d3c0ada554fdb6601be7a6d84704d1a6641eae64f555a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b10d9f66d444f5e36d3c0ada554fdb6601be7a6d84704d1a6641eae64f555a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1"} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b10d9f66d444f5e36d3c0ada554fdb6601be7a6d84704d1a6641eae64f555a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfcf15642c0a2323dd1a849cb9eab800759a779bc56074ad3a80ebf6a9ca4bc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfcf15642c0a2323dd1a849cb9eab800759a779bc56074ad3a80ebf6a9ca4bc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b10d9f66d444f5e36d3c0ada554fdb6601be7a6d84704d1a6641eae64f555a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfcf15642c0a2323dd1a849cb9eab800759a779bc56074ad3a80ebf6a9ca4bc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfcf15642c0a2323dd1a849cb9eab800759a779bc56074ad3a80ebf6a9ca4bc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfcf15642c0a2323dd1a849cb9eab800759a779bc56074ad3a80ebf6a9ca4bc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ad5faa41a632c6833533ab890673182080632e88e5130bf735e84d405bdb3f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfcf15642c0a2323dd1a849cb9eab800759a779bc56074ad3a80ebf6a9ca4bc3"} {"level":"info","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ad5faa41a632c6833533ab890673182080632e88e5130bf735e84d405bdb3f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfcf15642c0a2323dd1a849cb9eab800759a779bc56074ad3a80ebf6a9ca4bc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfcf15642c0a2323dd1a849cb9eab800759a779bc56074ad3a80ebf6a9ca4bc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfcf15642c0a2323dd1a849cb9eab800759a779bc56074ad3a80ebf6a9ca4bc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad5faa41a632c6833533ab890673182080632e88e5130bf735e84d405bdb3f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfcf15642c0a2323dd1a849cb9eab800759a779bc56074ad3a80ebf6a9ca4bc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfcf15642c0a2323dd1a849cb9eab800759a779bc56074ad3a80ebf6a9ca4bc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dfcf15642c0a2323dd1a849cb9eab800759a779bc56074ad3a80ebf6a9ca4bc3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dfcf15642c0a2323dd1a849cb9eab800759a779bc56074ad3a80ebf6a9ca4bc3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfcf15642c0a2323dd1a849cb9eab800759a779bc56074ad3a80ebf6a9ca4bc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b10d9f66d444f5e36d3c0ada554fdb6601be7a6d84704d1a6641eae64f555a6"} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad5faa41a632c6833533ab890673182080632e88e5130bf735e84d405bdb3f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfcf15642c0a2323dd1a849cb9eab800759a779bc56074ad3a80ebf6a9ca4bc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad5faa41a632c6833533ab890673182080632e88e5130bf735e84d405bdb3f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ad5faa41a632c6833533ab890673182080632e88e5130bf735e84d405bdb3f4"} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ad5faa41a632c6833533ab890673182080632e88e5130bf735e84d405bdb3f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ad5faa41a632c6833533ab890673182080632e88e5130bf735e84d405bdb3f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfcf15642c0a2323dd1a849cb9eab800759a779bc56074ad3a80ebf6a9ca4bc3"} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ad5faa41a632c6833533ab890673182080632e88e5130bf735e84d405bdb3f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e71ff5bc344c975c91d2c9bdb85435ecb4853c9bae0d74f2d60ea6a7a08137c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e71ff5bc344c975c91d2c9bdb85435ecb4853c9bae0d74f2d60ea6a7a08137c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad5faa41a632c6833533ab890673182080632e88e5130bf735e84d405bdb3f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e71ff5bc344c975c91d2c9bdb85435ecb4853c9bae0d74f2d60ea6a7a08137c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e71ff5bc344c975c91d2c9bdb85435ecb4853c9bae0d74f2d60ea6a7a08137c"} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e71ff5bc344c975c91d2c9bdb85435ecb4853c9bae0d74f2d60ea6a7a08137c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e71ff5bc344c975c91d2c9bdb85435ecb4853c9bae0d74f2d60ea6a7a08137c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e71ff5bc344c975c91d2c9bdb85435ecb4853c9bae0d74f2d60ea6a7a08137c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e71ff5bc344c975c91d2c9bdb85435ecb4853c9bae0d74f2d60ea6a7a08137c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ad5faa41a632c6833533ab890673182080632e88e5130bf735e84d405bdb3f4"} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e71ff5bc344c975c91d2c9bdb85435ecb4853c9bae0d74f2d60ea6a7a08137c"} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d"} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d"} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d"} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d"} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d"} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d"} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d"} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d"} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d"} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff"} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff"} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff"} {"level":"error","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff"} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff"} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3"} {"level":"info","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d"} {"level":"info","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff"} {"level":"info","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3"} {"level":"info","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d"} {"level":"info","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3"} {"level":"info","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3"} {"level":"info","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3"} {"level":"error","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a"} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a"} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a"} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a"} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"} {"level":"info","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:09:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:09:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f"} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"} {"level":"error","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"info","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"debug","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"} {"level":"info","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"debug","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"debug","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"debug","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"debug","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"info","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bae5d10e-e35f-432d-805f-b141e09ac4d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57822","PortSpecifier":{"PortValue":57822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bae5d10e-e35f-432d-805f-b141e09ac4d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bae5d10e-e35f-432d-805f-b141e09ac4d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57822","PortSpecifier":{"PortValue":57822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785283815,"nanos":611179744},"http":{"id":"bae5d10e-e35f-432d-805f-b141e09ac4d3","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bae5d10e-e35f-432d-805f-b141e09ac4d3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bae5d10e-e35f-432d-805f-b141e09ac4d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bae5d10e-e35f-432d-805f-b141e09ac4d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae5d10e-e35f-432d-805f-b141e09ac4d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae5d10e-e35f-432d-805f-b141e09ac4d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae5d10e-e35f-432d-805f-b141e09ac4d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/auth-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"auth-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bae5d10e-e35f-432d-805f-b141e09ac4d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae5d10e-e35f-432d-805f-b141e09ac4d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae5d10e-e35f-432d-805f-b141e09ac4d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bae5d10e-e35f-432d-805f-b141e09ac4d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bae5d10e-e35f-432d-805f-b141e09ac4d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e880092-9064-4f63-8bc1-0406bf22333c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58182","PortSpecifier":{"PortValue":58182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e880092-9064-4f63-8bc1-0406bf22333c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e880092-9064-4f63-8bc1-0406bf22333c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58182","PortSpecifier":{"PortValue":58182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785283815,"nanos":673273958},"http":{"id":"0e880092-9064-4f63-8bc1-0406bf22333c","method":"POST","headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e880092-9064-4f63-8bc1-0406bf22333c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e880092-9064-4f63-8bc1-0406bf22333c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e880092-9064-4f63-8bc1-0406bf22333c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e880092-9064-4f63-8bc1-0406bf22333c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e880092-9064-4f63-8bc1-0406bf22333c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e880092-9064-4f63-8bc1-0406bf22333c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa6130/auth-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"auth-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fa6130/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e880092-9064-4f63-8bc1-0406bf22333c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e880092-9064-4f63-8bc1-0406bf22333c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e880092-9064-4f63-8bc1-0406bf22333c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e880092-9064-4f63-8bc1-0406bf22333c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e880092-9064-4f63-8bc1-0406bf22333c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5eb68e4-db2c-4e59-bebc-be7a44b222da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58190","PortSpecifier":{"PortValue":58190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5eb68e4-db2c-4e59-bebc-be7a44b222da","method":"GET","path":"/maas-api/v1/api-keys/11ce5793-d25c-4473-9287-d37c8296b76b","host":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5eb68e4-db2c-4e59-bebc-be7a44b222da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58190","PortSpecifier":{"PortValue":58190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785283815,"nanos":712437958},"http":{"id":"b5eb68e4-db2c-4e59-bebc-be7a44b222da","method":"GET","headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/11ce5793-d25c-4473-9287-d37c8296b76b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b5eb68e4-db2c-4e59-bebc-be7a44b222da","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5eb68e4-db2c-4e59-bebc-be7a44b222da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5eb68e4-db2c-4e59-bebc-be7a44b222da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/11ce5793-d25c-4473-9287-d37c8296b76b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5eb68e4-db2c-4e59-bebc-be7a44b222da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5eb68e4-db2c-4e59-bebc-be7a44b222da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5eb68e4-db2c-4e59-bebc-be7a44b222da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa6130/auth-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"auth-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fa6130/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5eb68e4-db2c-4e59-bebc-be7a44b222da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5eb68e4-db2c-4e59-bebc-be7a44b222da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5eb68e4-db2c-4e59-bebc-be7a44b222da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5eb68e4-db2c-4e59-bebc-be7a44b222da","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5eb68e4-db2c-4e59-bebc-be7a44b222da","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a043fdf8-12b8-4f2b-aa27-04188e13cc38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57838","PortSpecifier":{"PortValue":57838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a043fdf8-12b8-4f2b-aa27-04188e13cc38","method":"GET","path":"/maas-api/v1/api-keys/11ce5793-d25c-4473-9287-d37c8296b76b","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a043fdf8-12b8-4f2b-aa27-04188e13cc38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57838","PortSpecifier":{"PortValue":57838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785283815,"nanos":742426901},"http":{"id":"a043fdf8-12b8-4f2b-aa27-04188e13cc38","method":"GET","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/11ce5793-d25c-4473-9287-d37c8296b76b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a043fdf8-12b8-4f2b-aa27-04188e13cc38","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a043fdf8-12b8-4f2b-aa27-04188e13cc38","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a043fdf8-12b8-4f2b-aa27-04188e13cc38","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/11ce5793-d25c-4473-9287-d37c8296b76b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a043fdf8-12b8-4f2b-aa27-04188e13cc38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a043fdf8-12b8-4f2b-aa27-04188e13cc38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a043fdf8-12b8-4f2b-aa27-04188e13cc38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/auth-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"auth-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a043fdf8-12b8-4f2b-aa27-04188e13cc38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a043fdf8-12b8-4f2b-aa27-04188e13cc38","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a043fdf8-12b8-4f2b-aa27-04188e13cc38","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a043fdf8-12b8-4f2b-aa27-04188e13cc38","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:10:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a043fdf8-12b8-4f2b-aa27-04188e13cc38","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:10:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a"} {"level":"info","ts":"2026-07-29T00:10:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f"} {"level":"info","ts":"2026-07-29T00:10:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"info","ts":"2026-07-29T00:10:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"} {"level":"info","ts":"2026-07-29T00:10:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"info","ts":"2026-07-29T00:10:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"info","ts":"2026-07-29T00:10:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681"} {"level":"info","ts":"2026-07-29T00:10:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4"} {"level":"info","ts":"2026-07-29T00:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"} {"level":"info","ts":"2026-07-29T00:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"} {"level":"info","ts":"2026-07-29T00:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"} {"level":"info","ts":"2026-07-29T00:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"} {"level":"debug","ts":"2026-07-29T00:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"info","ts":"2026-07-29T00:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"error","ts":"2026-07-29T00:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T00:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"debug","ts":"2026-07-29T00:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4"} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4"} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a"} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681"} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"} {"level":"debug","ts":"2026-07-29T00:10:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f"} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:10:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f"} {"level":"info","ts":"2026-07-29T00:10:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"} {"level":"info","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"529b7aea-d232-4b3b-8059-aeabf8329229","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48366","PortSpecifier":{"PortValue":48366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"529b7aea-d232-4b3b-8059-aeabf8329229","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"529b7aea-d232-4b3b-8059-aeabf8329229","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48366","PortSpecifier":{"PortValue":48366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785283858,"nanos":882194188},"http":{"id":"529b7aea-d232-4b3b-8059-aeabf8329229","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"529b7aea-d232-4b3b-8059-aeabf8329229","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"529b7aea-d232-4b3b-8059-aeabf8329229","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"529b7aea-d232-4b3b-8059-aeabf8329229","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"529b7aea-d232-4b3b-8059-aeabf8329229","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"529b7aea-d232-4b3b-8059-aeabf8329229","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"529b7aea-d232-4b3b-8059-aeabf8329229","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/auth-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"auth-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"529b7aea-d232-4b3b-8059-aeabf8329229","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"529b7aea-d232-4b3b-8059-aeabf8329229","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"529b7aea-d232-4b3b-8059-aeabf8329229","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"529b7aea-d232-4b3b-8059-aeabf8329229","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"529b7aea-d232-4b3b-8059-aeabf8329229","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d551879-35a1-4c69-a87b-424da3468894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51910","PortSpecifier":{"PortValue":51910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d551879-35a1-4c69-a87b-424da3468894","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d551879-35a1-4c69-a87b-424da3468894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51910","PortSpecifier":{"PortValue":51910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785283858,"nanos":924046090},"http":{"id":"7d551879-35a1-4c69-a87b-424da3468894","method":"POST","headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d551879-35a1-4c69-a87b-424da3468894","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d551879-35a1-4c69-a87b-424da3468894","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d551879-35a1-4c69-a87b-424da3468894","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d551879-35a1-4c69-a87b-424da3468894","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d551879-35a1-4c69-a87b-424da3468894","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d551879-35a1-4c69-a87b-424da3468894","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa6130/auth-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"auth-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fa6130/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d551879-35a1-4c69-a87b-424da3468894","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d551879-35a1-4c69-a87b-424da3468894","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d551879-35a1-4c69-a87b-424da3468894","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d551879-35a1-4c69-a87b-424da3468894","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d551879-35a1-4c69-a87b-424da3468894","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ed779fc-ffab-4809-bd5a-6612c462f763","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48376","PortSpecifier":{"PortValue":48376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ed779fc-ffab-4809-bd5a-6612c462f763","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ed779fc-ffab-4809-bd5a-6612c462f763","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48376","PortSpecifier":{"PortValue":48376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785283858,"nanos":964821323},"http":{"id":"7ed779fc-ffab-4809-bd5a-6612c462f763","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ed779fc-ffab-4809-bd5a-6612c462f763","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eRdmEo3R3eTSsPP4_DvJSIRdkXqNVI3OqUSHHjde8m9mdOBR0TldIn4CDI4d"} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ed779fc-ffab-4809-bd5a-6612c462f763","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eRdmEo3R3eTSsPP4_DvJSIRdkXqNVI3OqUSHHjde8m9mdOBR0TldIn4CDI4d\"}"} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ed779fc-ffab-4809-bd5a-6612c462f763","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"03c7364b-b8d6-449b-94df-0f5cdb08f29c","keyName":"e2e-auth-iso-a-682eda","subscription":"e2e-auth-iso-8bbb99","tenant":"e2e-shared-a-daedc5","userId":"03c7364b-b8d6-449b-94df-0f5cdb08f29c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ed779fc-ffab-4809-bd5a-6612c462f763","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed779fc-ffab-4809-bd5a-6612c462f763","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed779fc-ffab-4809-bd5a-6612c462f763","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed779fc-ffab-4809-bd5a-6612c462f763","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/auth-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"auth-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed779fc-ffab-4809-bd5a-6612c462f763","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ed779fc-ffab-4809-bd5a-6612c462f763","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed779fc-ffab-4809-bd5a-6612c462f763","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8bbb99"} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed779fc-ffab-4809-bd5a-6612c462f763","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ed779fc-ffab-4809-bd5a-6612c462f763","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:10:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ed779fc-ffab-4809-bd5a-6612c462f763","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b10d9f66d444f5e36d3c0ada554fdb6601be7a6d84704d1a6641eae64f555a6"} {"level":"info","ts":"2026-07-29T00:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df396121f652a3cb75008b181b1ab3ea98bf112efa510bcc567699d68ea2220f"} {"level":"info","ts":"2026-07-29T00:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6649dbd9559f88f7c6b61d9e0f970cd638db67ea7d31ad9ff55f934ce7f97f4b"} {"level":"info","ts":"2026-07-29T00:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dab4b91f9d327537a7386a4dde2654173ef73b3f6c170fc3a3fd66e1eb756f3"} {"level":"info","ts":"2026-07-29T00:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/065897b378e471ad7c02596ee99658c776243aef7b76cce41929ee3c801de07f"} {"level":"info","ts":"2026-07-29T00:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"info","ts":"2026-07-29T00:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfcb4c1de673ee9ff82cc4ac4c0b0316dee0750b07058b59b58d633dade510ff"} {"level":"info","ts":"2026-07-29T00:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d"} {"level":"info","ts":"2026-07-29T00:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/073d81ced96a08acd408d019b4d18427d6e6481f6785170858db6d11499ea85a"} {"level":"info","ts":"2026-07-29T00:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9bb08f334d379f3b1c090481ebc286df700c8e69240e0873e7414568489b681"} {"level":"info","ts":"2026-07-29T00:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f89a85e0a1de764e64752cf9b7ede19ee56e3a9a19a8eb0eab522de7f622c9f"} {"level":"info","ts":"2026-07-29T00:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"} {"level":"info","ts":"2026-07-29T00:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3bd2a9f34b7246c36ab6e0a0dcc9a33559e21bdcc7a8e76ac6f08e5c3fbf64e"} {"level":"info","ts":"2026-07-29T00:11:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6eb8ca636f513db765c17e763aed305c2e859e6269eb44823d79ee219c36d19d"} {"level":"info","ts":"2026-07-29T00:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfcf15642c0a2323dd1a849cb9eab800759a779bc56074ad3a80ebf6a9ca4bc3"} {"level":"info","ts":"2026-07-29T00:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/212af1daf95b99490c9bc22673d10d2b990f2f558f8803e0aabcbe64b002e025"} {"level":"info","ts":"2026-07-29T00:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"} {"level":"info","ts":"2026-07-29T00:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ad5faa41a632c6833533ab890673182080632e88e5130bf735e84d405bdb3f4"} {"level":"info","ts":"2026-07-29T00:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1"} {"level":"info","ts":"2026-07-29T00:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"} {"level":"info","ts":"2026-07-29T00:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2989366dd62be05724e6abc381ffdef3c3e151254aaa13e50d4845a75137eca4"} {"level":"info","ts":"2026-07-29T00:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e71ff5bc344c975c91d2c9bdb85435ecb4853c9bae0d74f2d60ea6a7a08137c"} {"level":"info","ts":"2026-07-29T00:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"} {"level":"info","ts":"2026-07-29T00:11:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3532a21312312ca6a068dd3377c1799783c66738feec37f0d7a12cb332820dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3532a21312312ca6a068dd3377c1799783c66738feec37f0d7a12cb332820dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3532a21312312ca6a068dd3377c1799783c66738feec37f0d7a12cb332820dc1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3532a21312312ca6a068dd3377c1799783c66738feec37f0d7a12cb332820dc1"} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3532a21312312ca6a068dd3377c1799783c66738feec37f0d7a12cb332820dc1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3532a21312312ca6a068dd3377c1799783c66738feec37f0d7a12cb332820dc1"} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3532a21312312ca6a068dd3377c1799783c66738feec37f0d7a12cb332820dc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3532a21312312ca6a068dd3377c1799783c66738feec37f0d7a12cb332820dc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3532a21312312ca6a068dd3377c1799783c66738feec37f0d7a12cb332820dc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3532a21312312ca6a068dd3377c1799783c66738feec37f0d7a12cb332820dc1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3532a21312312ca6a068dd3377c1799783c66738feec37f0d7a12cb332820dc1"} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291"} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291"} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291"} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c2a6a1de38f439967e4d21fe896648cfc37013bf36c7814f2552c1f18233610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c2a6a1de38f439967e4d21fe896648cfc37013bf36c7814f2552c1f18233610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c2a6a1de38f439967e4d21fe896648cfc37013bf36c7814f2552c1f18233610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c2a6a1de38f439967e4d21fe896648cfc37013bf36c7814f2552c1f18233610"} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c2a6a1de38f439967e4d21fe896648cfc37013bf36c7814f2552c1f18233610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c2a6a1de38f439967e4d21fe896648cfc37013bf36c7814f2552c1f18233610","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c2a6a1de38f439967e4d21fe896648cfc37013bf36c7814f2552c1f18233610"} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c2a6a1de38f439967e4d21fe896648cfc37013bf36c7814f2552c1f18233610","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c2a6a1de38f439967e4d21fe896648cfc37013bf36c7814f2552c1f18233610"} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291"} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c2a6a1de38f439967e4d21fe896648cfc37013bf36c7814f2552c1f18233610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c2a6a1de38f439967e4d21fe896648cfc37013bf36c7814f2552c1f18233610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c"} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c2a6a1de38f439967e4d21fe896648cfc37013bf36c7814f2552c1f18233610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c2a6a1de38f439967e4d21fe896648cfc37013bf36c7814f2552c1f18233610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c"} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c2a6a1de38f439967e4d21fe896648cfc37013bf36c7814f2552c1f18233610"} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c"} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c"} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c"} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c"} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d"} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c"} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d"} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1c01bdd2fdd35254a9db4b962c5250ee4e33ac918931c5e1518fa4fc952e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1c01bdd2fdd35254a9db4b962c5250ee4e33ac918931c5e1518fa4fc952e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1c01bdd2fdd35254a9db4b962c5250ee4e33ac918931c5e1518fa4fc952e28"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e1c01bdd2fdd35254a9db4b962c5250ee4e33ac918931c5e1518fa4fc952e28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e1c01bdd2fdd35254a9db4b962c5250ee4e33ac918931c5e1518fa4fc952e28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e1c01bdd2fdd35254a9db4b962c5250ee4e33ac918931c5e1518fa4fc952e28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e1c01bdd2fdd35254a9db4b962c5250ee4e33ac918931c5e1518fa4fc952e28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d"} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e1c01bdd2fdd35254a9db4b962c5250ee4e33ac918931c5e1518fa4fc952e28"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda"} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ebc036f7320606debcd512355d2881f8fc0d10ab0224db9e3ceb0058577ad26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ebc036f7320606debcd512355d2881f8fc0d10ab0224db9e3ceb0058577ad26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ebc036f7320606debcd512355d2881f8fc0d10ab0224db9e3ceb0058577ad26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ebc036f7320606debcd512355d2881f8fc0d10ab0224db9e3ceb0058577ad26"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ebc036f7320606debcd512355d2881f8fc0d10ab0224db9e3ceb0058577ad26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9c31b5d612b6c679c0368efdb1c392c7dfaf2add98a44147bc1969b6799005b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9c31b5d612b6c679c0368efdb1c392c7dfaf2add98a44147bc1969b6799005b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6805abdfd1454a5f90b07d5093ee867571021b26bf00522fc54f918f57d729","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9c31b5d612b6c679c0368efdb1c392c7dfaf2add98a44147bc1969b6799005b"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6805abdfd1454a5f90b07d5093ee867571021b26bf00522fc54f918f57d729","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ebc036f7320606debcd512355d2881f8fc0d10ab0224db9e3ceb0058577ad26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ebc036f7320606debcd512355d2881f8fc0d10ab0224db9e3ceb0058577ad26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6805abdfd1454a5f90b07d5093ee867571021b26bf00522fc54f918f57d729"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ebc036f7320606debcd512355d2881f8fc0d10ab0224db9e3ceb0058577ad26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12043583b94bdf4c1785501fc4b7e78c12f4cd4d0b1c4c56f36ca2d4f27164a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ebc036f7320606debcd512355d2881f8fc0d10ab0224db9e3ceb0058577ad26"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12043583b94bdf4c1785501fc4b7e78c12f4cd4d0b1c4c56f36ca2d4f27164a5"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12043583b94bdf4c1785501fc4b7e78c12f4cd4d0b1c4c56f36ca2d4f27164a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9c31b5d612b6c679c0368efdb1c392c7dfaf2add98a44147bc1969b6799005b"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9c31b5d612b6c679c0368efdb1c392c7dfaf2add98a44147bc1969b6799005b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9c31b5d612b6c679c0368efdb1c392c7dfaf2add98a44147bc1969b6799005b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f86ef58dcf4375d3bc411a9ec838d87ccc01c836b7d4d485b2f1bca9a792b9f"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/763ab7cd550c99a9c7c4660f0b1e1613f4bf7b500d49c3aaab2db150a049e426"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9c31b5d612b6c679c0368efdb1c392c7dfaf2add98a44147bc1969b6799005b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f86ef58dcf4375d3bc411a9ec838d87ccc01c836b7d4d485b2f1bca9a792b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f86ef58dcf4375d3bc411a9ec838d87ccc01c836b7d4d485b2f1bca9a792b9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96e6ad18b1de6856cfa9f3006ace7bd3f7cbfcb71342b7bdb4b60043eb34bd1a"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ebc036f7320606debcd512355d2881f8fc0d10ab0224db9e3ceb0058577ad26"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f86ef58dcf4375d3bc411a9ec838d87ccc01c836b7d4d485b2f1bca9a792b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"763ab7cd550c99a9c7c4660f0b1e1613f4bf7b500d49c3aaab2db150a049e426","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["763ab7cd550c99a9c7c4660f0b1e1613f4bf7b500d49c3aaab2db150a049e426"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6472eefcf69528194738825341d80db9ebc01f34c179ac9a0a114fc32e6bc393"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"} {"level":"info","ts":"2026-07-29T00:12:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12043583b94bdf4c1785501fc4b7e78c12f4cd4d0b1c4c56f36ca2d4f27164a5"} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"763ab7cd550c99a9c7c4660f0b1e1613f4bf7b500d49c3aaab2db150a049e426","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc6805abdfd1454a5f90b07d5093ee867571021b26bf00522fc54f918f57d729","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc6805abdfd1454a5f90b07d5093ee867571021b26bf00522fc54f918f57d729"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c76fa4bad75f4a1c2e8e38b146aa6e8401489ec56871f2e1ee098467f24a3925"} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda"} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc6805abdfd1454a5f90b07d5093ee867571021b26bf00522fc54f918f57d729","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96e6ad18b1de6856cfa9f3006ace7bd3f7cbfcb71342b7bdb4b60043eb34bd1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96e6ad18b1de6856cfa9f3006ace7bd3f7cbfcb71342b7bdb4b60043eb34bd1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9c31b5d612b6c679c0368efdb1c392c7dfaf2add98a44147bc1969b6799005b"} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f86ef58dcf4375d3bc411a9ec838d87ccc01c836b7d4d485b2f1bca9a792b9f"} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96e6ad18b1de6856cfa9f3006ace7bd3f7cbfcb71342b7bdb4b60043eb34bd1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ebc036f7320606debcd512355d2881f8fc0d10ab0224db9e3ceb0058577ad26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6472eefcf69528194738825341d80db9ebc01f34c179ac9a0a114fc32e6bc393","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6472eefcf69528194738825341d80db9ebc01f34c179ac9a0a114fc32e6bc393"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/763ab7cd550c99a9c7c4660f0b1e1613f4bf7b500d49c3aaab2db150a049e426"} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc6805abdfd1454a5f90b07d5093ee867571021b26bf00522fc54f918f57d729"} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96e6ad18b1de6856cfa9f3006ace7bd3f7cbfcb71342b7bdb4b60043eb34bd1a"} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6472eefcf69528194738825341d80db9ebc01f34c179ac9a0a114fc32e6bc393","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6472eefcf69528194738825341d80db9ebc01f34c179ac9a0a114fc32e6bc393"} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12043583b94bdf4c1785501fc4b7e78c12f4cd4d0b1c4c56f36ca2d4f27164a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12043583b94bdf4c1785501fc4b7e78c12f4cd4d0b1c4c56f36ca2d4f27164a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12043583b94bdf4c1785501fc4b7e78c12f4cd4d0b1c4c56f36ca2d4f27164a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c76fa4bad75f4a1c2e8e38b146aa6e8401489ec56871f2e1ee098467f24a3925","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c76fa4bad75f4a1c2e8e38b146aa6e8401489ec56871f2e1ee098467f24a3925"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12043583b94bdf4c1785501fc4b7e78c12f4cd4d0b1c4c56f36ca2d4f27164a5"} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c76fa4bad75f4a1c2e8e38b146aa6e8401489ec56871f2e1ee098467f24a3925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c76fa4bad75f4a1c2e8e38b146aa6e8401489ec56871f2e1ee098467f24a3925"} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9c31b5d612b6c679c0368efdb1c392c7dfaf2add98a44147bc1969b6799005b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f86ef58dcf4375d3bc411a9ec838d87ccc01c836b7d4d485b2f1bca9a792b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"763ab7cd550c99a9c7c4660f0b1e1613f4bf7b500d49c3aaab2db150a049e426","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc6805abdfd1454a5f90b07d5093ee867571021b26bf00522fc54f918f57d729","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96e6ad18b1de6856cfa9f3006ace7bd3f7cbfcb71342b7bdb4b60043eb34bd1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6472eefcf69528194738825341d80db9ebc01f34c179ac9a0a114fc32e6bc393","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12043583b94bdf4c1785501fc4b7e78c12f4cd4d0b1c4c56f36ca2d4f27164a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c76fa4bad75f4a1c2e8e38b146aa6e8401489ec56871f2e1ee098467f24a3925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:12:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"error","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:12:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78359bb7-e2bf-484c-b098-eb63522267e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57084","PortSpecifier":{"PortValue":57084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78359bb7-e2bf-484c-b098-eb63522267e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78359bb7-e2bf-484c-b098-eb63522267e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57084","PortSpecifier":{"PortValue":57084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785283951,"nanos":768529246},"http":{"id":"78359bb7-e2bf-484c-b098-eb63522267e4","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78359bb7-e2bf-484c-b098-eb63522267e4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78359bb7-e2bf-484c-b098-eb63522267e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78359bb7-e2bf-484c-b098-eb63522267e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78359bb7-e2bf-484c-b098-eb63522267e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78359bb7-e2bf-484c-b098-eb63522267e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78359bb7-e2bf-484c-b098-eb63522267e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/sub-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"sub-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78359bb7-e2bf-484c-b098-eb63522267e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78359bb7-e2bf-484c-b098-eb63522267e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78359bb7-e2bf-484c-b098-eb63522267e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78359bb7-e2bf-484c-b098-eb63522267e4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78359bb7-e2bf-484c-b098-eb63522267e4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8aeab5f-8ed6-4538-bad2-758362d21ee2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46094","PortSpecifier":{"PortValue":46094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8aeab5f-8ed6-4538-bad2-758362d21ee2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8aeab5f-8ed6-4538-bad2-758362d21ee2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46094","PortSpecifier":{"PortValue":46094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785283951,"nanos":812318283},"http":{"id":"e8aeab5f-8ed6-4538-bad2-758362d21ee2","method":"POST","headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e8aeab5f-8ed6-4538-bad2-758362d21ee2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8aeab5f-8ed6-4538-bad2-758362d21ee2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8aeab5f-8ed6-4538-bad2-758362d21ee2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8aeab5f-8ed6-4538-bad2-758362d21ee2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8aeab5f-8ed6-4538-bad2-758362d21ee2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8aeab5f-8ed6-4538-bad2-758362d21ee2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa6130/sub-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fa6130/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"sub-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e8aeab5f-8ed6-4538-bad2-758362d21ee2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8aeab5f-8ed6-4538-bad2-758362d21ee2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8aeab5f-8ed6-4538-bad2-758362d21ee2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8aeab5f-8ed6-4538-bad2-758362d21ee2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8aeab5f-8ed6-4538-bad2-758362d21ee2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d02caea-d715-45d9-ba74-c375dd246bf9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57090","PortSpecifier":{"PortValue":57090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d02caea-d715-45d9-ba74-c375dd246bf9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d02caea-d715-45d9-ba74-c375dd246bf9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57090","PortSpecifier":{"PortValue":57090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785283951,"nanos":873096492},"http":{"id":"5d02caea-d715-45d9-ba74-c375dd246bf9","method":"GET","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d02caea-d715-45d9-ba74-c375dd246bf9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eOQq2tJX0nUStPFD_Mbtb0H3UrM9trpgJRA4kKNm9aDhfhzKagAsVFYG7rDl"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5d02caea-d715-45d9-ba74-c375dd246bf9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eOQq2tJX0nUStPFD_Mbtb0H3UrM9trpgJRA4kKNm9aDhfhzKagAsVFYG7rDl\"}"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5d02caea-d715-45d9-ba74-c375dd246bf9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f32e012b-17ce-40eb-823f-0d1afaca5fc0","keyName":"e2e-sub-iso-e6a7ca","subscription":"e2e-a-only-15cf27","tenant":"e2e-shared-a-daedc5","userId":"f32e012b-17ce-40eb-823f-0d1afaca5fc0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d02caea-d715-45d9-ba74-c375dd246bf9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d02caea-d715-45d9-ba74-c375dd246bf9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d02caea-d715-45d9-ba74-c375dd246bf9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d02caea-d715-45d9-ba74-c375dd246bf9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/sub-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"sub-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d02caea-d715-45d9-ba74-c375dd246bf9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d02caea-d715-45d9-ba74-c375dd246bf9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d02caea-d715-45d9-ba74-c375dd246bf9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-15cf27"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d02caea-d715-45d9-ba74-c375dd246bf9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d02caea-d715-45d9-ba74-c375dd246bf9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d02caea-d715-45d9-ba74-c375dd246bf9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"090866ca-bde5-42fe-9244-b3b1f7f614c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46110","PortSpecifier":{"PortValue":46110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"090866ca-bde5-42fe-9244-b3b1f7f614c7","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"090866ca-bde5-42fe-9244-b3b1f7f614c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46110","PortSpecifier":{"PortValue":46110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785283951,"nanos":915846584},"http":{"id":"090866ca-bde5-42fe-9244-b3b1f7f614c7","method":"GET","headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"090866ca-bde5-42fe-9244-b3b1f7f614c7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Ei6v14UMcdeBgoDU_fO1LE4sxREmwscR9w32amAgYnetiGCXtBdbR8WlqHbU"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"090866ca-bde5-42fe-9244-b3b1f7f614c7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fa6130.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Ei6v14UMcdeBgoDU_fO1LE4sxREmwscR9w32amAgYnetiGCXtBdbR8WlqHbU\"}"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"090866ca-bde5-42fe-9244-b3b1f7f614c7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fa6130.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6af63e78-016a-4f2b-9cc0-bcd092b5238f","keyName":"e2e-sub-iso-2bffae","subscription":"e2e-b-only-15cf27","tenant":"e2e-shared-b-fa6130","userId":"6af63e78-016a-4f2b-9cc0-bcd092b5238f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"090866ca-bde5-42fe-9244-b3b1f7f614c7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"090866ca-bde5-42fe-9244-b3b1f7f614c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"090866ca-bde5-42fe-9244-b3b1f7f614c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"090866ca-bde5-42fe-9244-b3b1f7f614c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa6130/sub-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fa6130/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"sub-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"090866ca-bde5-42fe-9244-b3b1f7f614c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"090866ca-bde5-42fe-9244-b3b1f7f614c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"090866ca-bde5-42fe-9244-b3b1f7f614c7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-15cf27"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"090866ca-bde5-42fe-9244-b3b1f7f614c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"090866ca-bde5-42fe-9244-b3b1f7f614c7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:12:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"090866ca-bde5-42fe-9244-b3b1f7f614c7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a0bebfb-ce86-4c5e-9902-db8a88814ee1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36092","PortSpecifier":{"PortValue":36092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a0bebfb-ce86-4c5e-9902-db8a88814ee1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a0bebfb-ce86-4c5e-9902-db8a88814ee1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36092","PortSpecifier":{"PortValue":36092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785283974,"nanos":580468768},"http":{"id":"8a0bebfb-ce86-4c5e-9902-db8a88814ee1","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8a0bebfb-ce86-4c5e-9902-db8a88814ee1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a0bebfb-ce86-4c5e-9902-db8a88814ee1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a0bebfb-ce86-4c5e-9902-db8a88814ee1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a0bebfb-ce86-4c5e-9902-db8a88814ee1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a0bebfb-ce86-4c5e-9902-db8a88814ee1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a0bebfb-ce86-4c5e-9902-db8a88814ee1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/sub-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"sub-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8a0bebfb-ce86-4c5e-9902-db8a88814ee1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a0bebfb-ce86-4c5e-9902-db8a88814ee1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a0bebfb-ce86-4c5e-9902-db8a88814ee1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a0bebfb-ce86-4c5e-9902-db8a88814ee1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a0bebfb-ce86-4c5e-9902-db8a88814ee1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc079f82-ddfd-4615-86dd-c5fc35c6da78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39044","PortSpecifier":{"PortValue":39044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc079f82-ddfd-4615-86dd-c5fc35c6da78","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc079f82-ddfd-4615-86dd-c5fc35c6da78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39044","PortSpecifier":{"PortValue":39044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785283974,"nanos":632242499},"http":{"id":"bc079f82-ddfd-4615-86dd-c5fc35c6da78","method":"POST","headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bc079f82-ddfd-4615-86dd-c5fc35c6da78","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc079f82-ddfd-4615-86dd-c5fc35c6da78","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc079f82-ddfd-4615-86dd-c5fc35c6da78","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc079f82-ddfd-4615-86dd-c5fc35c6da78","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc079f82-ddfd-4615-86dd-c5fc35c6da78","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc079f82-ddfd-4615-86dd-c5fc35c6da78","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa6130/sub-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fa6130/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"sub-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc079f82-ddfd-4615-86dd-c5fc35c6da78","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc079f82-ddfd-4615-86dd-c5fc35c6da78","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc079f82-ddfd-4615-86dd-c5fc35c6da78","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc079f82-ddfd-4615-86dd-c5fc35c6da78","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc079f82-ddfd-4615-86dd-c5fc35c6da78","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bab011ff-cea4-4756-ac01-1f5acf78d120","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36100","PortSpecifier":{"PortValue":36100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bab011ff-cea4-4756-ac01-1f5acf78d120","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bab011ff-cea4-4756-ac01-1f5acf78d120","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36100","PortSpecifier":{"PortValue":36100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785283974,"nanos":671515186},"http":{"id":"bab011ff-cea4-4756-ac01-1f5acf78d120","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bab011ff-cea4-4756-ac01-1f5acf78d120","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rbMfmPdOZtIPhDIV_IIsycxnsBwFnyr9dm1vM5D3gu568XFntgVpGMQpnQVG"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bab011ff-cea4-4756-ac01-1f5acf78d120","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rbMfmPdOZtIPhDIV_IIsycxnsBwFnyr9dm1vM5D3gu568XFntgVpGMQpnQVG\"}"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bab011ff-cea4-4756-ac01-1f5acf78d120","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9e0de55b-66b3-4700-9a50-a4c0ed76ec15","keyName":"e2e-sub-iso-d5ca84","subscription":"e2e-shared-sub-bd6e4b","tenant":"e2e-shared-a-daedc5","userId":"9e0de55b-66b3-4700-9a50-a4c0ed76ec15","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bab011ff-cea4-4756-ac01-1f5acf78d120","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bab011ff-cea4-4756-ac01-1f5acf78d120","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bab011ff-cea4-4756-ac01-1f5acf78d120","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bab011ff-cea4-4756-ac01-1f5acf78d120","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/sub-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"sub-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bab011ff-cea4-4756-ac01-1f5acf78d120","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bab011ff-cea4-4756-ac01-1f5acf78d120","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bab011ff-cea4-4756-ac01-1f5acf78d120","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bab011ff-cea4-4756-ac01-1f5acf78d120","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-bd6e4b"} {"level":"info","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bab011ff-cea4-4756-ac01-1f5acf78d120","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bab011ff-cea4-4756-ac01-1f5acf78d120","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b910c3b9-1b3c-4c38-83be-ca90db9be960","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39056","PortSpecifier":{"PortValue":39056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b910c3b9-1b3c-4c38-83be-ca90db9be960","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b910c3b9-1b3c-4c38-83be-ca90db9be960","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39056","PortSpecifier":{"PortValue":39056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785283974,"nanos":700782944},"http":{"id":"b910c3b9-1b3c-4c38-83be-ca90db9be960","method":"POST","headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b910c3b9-1b3c-4c38-83be-ca90db9be960","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-enyPyKPvPLjceWIu_PfLlrEYkA88kkgc1mgsoerXFwX6iMlHM4QeXmGi59ri"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b910c3b9-1b3c-4c38-83be-ca90db9be960","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fa6130.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-enyPyKPvPLjceWIu_PfLlrEYkA88kkgc1mgsoerXFwX6iMlHM4QeXmGi59ri\"}"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b910c3b9-1b3c-4c38-83be-ca90db9be960","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fa6130.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"78c51315-b1fb-4bd3-a4f3-060abcd2e31b","keyName":"e2e-sub-iso-f6d282","subscription":"e2e-shared-sub-bd6e4b","tenant":"e2e-shared-b-fa6130","userId":"78c51315-b1fb-4bd3-a4f3-060abcd2e31b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b910c3b9-1b3c-4c38-83be-ca90db9be960","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b910c3b9-1b3c-4c38-83be-ca90db9be960","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b910c3b9-1b3c-4c38-83be-ca90db9be960","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b910c3b9-1b3c-4c38-83be-ca90db9be960","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa6130/sub-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fa6130/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"sub-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b910c3b9-1b3c-4c38-83be-ca90db9be960","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b910c3b9-1b3c-4c38-83be-ca90db9be960","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b910c3b9-1b3c-4c38-83be-ca90db9be960","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b910c3b9-1b3c-4c38-83be-ca90db9be960","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-bd6e4b"} {"level":"info","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b910c3b9-1b3c-4c38-83be-ca90db9be960","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:12:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b910c3b9-1b3c-4c38-83be-ca90db9be960","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ebc036f7320606debcd512355d2881f8fc0d10ab0224db9e3ceb0058577ad26"} {"level":"info","ts":"2026-07-29T00:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e1c01bdd2fdd35254a9db4b962c5250ee4e33ac918931c5e1518fa4fc952e28"} {"level":"info","ts":"2026-07-29T00:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9c31b5d612b6c679c0368efdb1c392c7dfaf2add98a44147bc1969b6799005b"} {"level":"info","ts":"2026-07-29T00:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"info","ts":"2026-07-29T00:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"} {"level":"info","ts":"2026-07-29T00:13:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6224908f34ab53ce7ae8b647d26355165c857709c11bfca834f4fe6053aedf2c"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bff1bba88561d40eabe13cfc4d01850d0279e43cc3d4eb190cbea1509f0261c2"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c2a6a1de38f439967e4d21fe896648cfc37013bf36c7814f2552c1f18233610"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e468f60809af2a63b7ba33285f6eec248a8ecec4a58833ee42003b2e062eedda"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3532a21312312ca6a068dd3377c1799783c66738feec37f0d7a12cb332820dc1"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c76fa4bad75f4a1c2e8e38b146aa6e8401489ec56871f2e1ee098467f24a3925"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12043583b94bdf4c1785501fc4b7e78c12f4cd4d0b1c4c56f36ca2d4f27164a5"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/275c3892319f5362a6354135031708111ad56fd9c1f32f0843d92b2353b3f291"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f86ef58dcf4375d3bc411a9ec838d87ccc01c836b7d4d485b2f1bca9a792b9f"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc6805abdfd1454a5f90b07d5093ee867571021b26bf00522fc54f918f57d729"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6472eefcf69528194738825341d80db9ebc01f34c179ac9a0a114fc32e6bc393"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/763ab7cd550c99a9c7c4660f0b1e1613f4bf7b500d49c3aaab2db150a049e426"} {"level":"info","ts":"2026-07-29T00:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96e6ad18b1de6856cfa9f3006ace7bd3f7cbfcb71342b7bdb4b60043eb34bd1a"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c97ab9f5e9ab1984565a65621ecd455e673dc750f649bced1abab5ea63ef88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c97ab9f5e9ab1984565a65621ecd455e673dc750f649bced1abab5ea63ef88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43c97ab9f5e9ab1984565a65621ecd455e673dc750f649bced1abab5ea63ef88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43c97ab9f5e9ab1984565a65621ecd455e673dc750f649bced1abab5ea63ef88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c97ab9f5e9ab1984565a65621ecd455e673dc750f649bced1abab5ea63ef88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c97ab9f5e9ab1984565a65621ecd455e673dc750f649bced1abab5ea63ef88"} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c97ab9f5e9ab1984565a65621ecd455e673dc750f649bced1abab5ea63ef88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43c97ab9f5e9ab1984565a65621ecd455e673dc750f649bced1abab5ea63ef88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c97ab9f5e9ab1984565a65621ecd455e673dc750f649bced1abab5ea63ef88"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c97ab9f5e9ab1984565a65621ecd455e673dc750f649bced1abab5ea63ef88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43c97ab9f5e9ab1984565a65621ecd455e673dc750f649bced1abab5ea63ef88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c97ab9f5e9ab1984565a65621ecd455e673dc750f649bced1abab5ea63ef88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43c97ab9f5e9ab1984565a65621ecd455e673dc750f649bced1abab5ea63ef88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c97ab9f5e9ab1984565a65621ecd455e673dc750f649bced1abab5ea63ef88"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3"} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3"} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3"} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070"} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070"} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff"} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070"} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff"} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e91c093ebeb32c0dfef9a6a6f3ea645b2e690084a1feecac285eda41df947ecf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff"} {"level":"info","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e91c093ebeb32c0dfef9a6a6f3ea645b2e690084a1feecac285eda41df947ecf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e91c093ebeb32c0dfef9a6a6f3ea645b2e690084a1feecac285eda41df947ecf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:13:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e91c093ebeb32c0dfef9a6a6f3ea645b2e690084a1feecac285eda41df947ecf"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e91c093ebeb32c0dfef9a6a6f3ea645b2e690084a1feecac285eda41df947ecf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff"} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e91c093ebeb32c0dfef9a6a6f3ea645b2e690084a1feecac285eda41df947ecf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e91c093ebeb32c0dfef9a6a6f3ea645b2e690084a1feecac285eda41df947ecf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e91c093ebeb32c0dfef9a6a6f3ea645b2e690084a1feecac285eda41df947ecf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e91c093ebeb32c0dfef9a6a6f3ea645b2e690084a1feecac285eda41df947ecf"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e91c093ebeb32c0dfef9a6a6f3ea645b2e690084a1feecac285eda41df947ecf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff"} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e91c093ebeb32c0dfef9a6a6f3ea645b2e690084a1feecac285eda41df947ecf"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff"} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1"} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1"} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9544c8f493e1e1e67174f93fe5c4c959b3c36a6e299c55417a7a1cad044a14e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9544c8f493e1e1e67174f93fe5c4c959b3c36a6e299c55417a7a1cad044a14e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cc6bbed7bf3189792c229c1be70562480e323006cb2d8f7adee9dd2e5fb7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9544c8f493e1e1e67174f93fe5c4c959b3c36a6e299c55417a7a1cad044a14e"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cc6bbed7bf3189792c229c1be70562480e323006cb2d8f7adee9dd2e5fb7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9544c8f493e1e1e67174f93fe5c4c959b3c36a6e299c55417a7a1cad044a14e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9544c8f493e1e1e67174f93fe5c4c959b3c36a6e299c55417a7a1cad044a14e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cc6bbed7bf3189792c229c1be70562480e323006cb2d8f7adee9dd2e5fb7cd"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9544c8f493e1e1e67174f93fe5c4c959b3c36a6e299c55417a7a1cad044a14e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1092b44cd2915597f9adcc466593093bf5603c0f41cb67ad870a2947570013fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1092b44cd2915597f9adcc466593093bf5603c0f41cb67ad870a2947570013fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cc6bbed7bf3189792c229c1be70562480e323006cb2d8f7adee9dd2e5fb7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cc6bbed7bf3189792c229c1be70562480e323006cb2d8f7adee9dd2e5fb7cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9544c8f493e1e1e67174f93fe5c4c959b3c36a6e299c55417a7a1cad044a14e"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cc6bbed7bf3189792c229c1be70562480e323006cb2d8f7adee9dd2e5fb7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9544c8f493e1e1e67174f93fe5c4c959b3c36a6e299c55417a7a1cad044a14e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c048685a11f99c07a00690a01cae33963ba8a7d34501c65f91d6b38bef0e6d67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1092b44cd2915597f9adcc466593093bf5603c0f41cb67ad870a2947570013fe"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c048685a11f99c07a00690a01cae33963ba8a7d34501c65f91d6b38bef0e6d67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1092b44cd2915597f9adcc466593093bf5603c0f41cb67ad870a2947570013fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1092b44cd2915597f9adcc466593093bf5603c0f41cb67ad870a2947570013fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1092b44cd2915597f9adcc466593093bf5603c0f41cb67ad870a2947570013fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45a3e3f0949dd4dcc3383568c31293be9dcc25a2f0a76ecad5bada2561210728","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45a3e3f0949dd4dcc3383568c31293be9dcc25a2f0a76ecad5bada2561210728","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cc6bbed7bf3189792c229c1be70562480e323006cb2d8f7adee9dd2e5fb7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cc6bbed7bf3189792c229c1be70562480e323006cb2d8f7adee9dd2e5fb7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c048685a11f99c07a00690a01cae33963ba8a7d34501c65f91d6b38bef0e6d67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1f65b3a66703316e36907fcf24fa9fdc5e549afb478c9c3977b6b85c3676bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cc6bbed7bf3189792c229c1be70562480e323006cb2d8f7adee9dd2e5fb7cd"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1f65b3a66703316e36907fcf24fa9fdc5e549afb478c9c3977b6b85c3676bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bff87cec7205913ff29dfc7ef9bd94fa5fc0f5c2bcea103361007c1c35b391b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bff87cec7205913ff29dfc7ef9bd94fa5fc0f5c2bcea103361007c1c35b391b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1092b44cd2915597f9adcc466593093bf5603c0f41cb67ad870a2947570013fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e788b0c0858a4773b0836d4ee92fa76fd589277c6d0b62af26af1a1998cc512c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c048685a11f99c07a00690a01cae33963ba8a7d34501c65f91d6b38bef0e6d67"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e788b0c0858a4773b0836d4ee92fa76fd589277c6d0b62af26af1a1998cc512c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45a3e3f0949dd4dcc3383568c31293be9dcc25a2f0a76ecad5bada2561210728","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45a3e3f0949dd4dcc3383568c31293be9dcc25a2f0a76ecad5bada2561210728"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45a3e3f0949dd4dcc3383568c31293be9dcc25a2f0a76ecad5bada2561210728","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cc6bbed7bf3189792c229c1be70562480e323006cb2d8f7adee9dd2e5fb7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cc6bbed7bf3189792c229c1be70562480e323006cb2d8f7adee9dd2e5fb7cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cc6bbed7bf3189792c229c1be70562480e323006cb2d8f7adee9dd2e5fb7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c048685a11f99c07a00690a01cae33963ba8a7d34501c65f91d6b38bef0e6d67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c048685a11f99c07a00690a01cae33963ba8a7d34501c65f91d6b38bef0e6d67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9544c8f493e1e1e67174f93fe5c4c959b3c36a6e299c55417a7a1cad044a14e"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c048685a11f99c07a00690a01cae33963ba8a7d34501c65f91d6b38bef0e6d67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1f65b3a66703316e36907fcf24fa9fdc5e549afb478c9c3977b6b85c3676bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1f65b3a66703316e36907fcf24fa9fdc5e549afb478c9c3977b6b85c3676bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1f65b3a66703316e36907fcf24fa9fdc5e549afb478c9c3977b6b85c3676bf"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bff87cec7205913ff29dfc7ef9bd94fa5fc0f5c2bcea103361007c1c35b391b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bff87cec7205913ff29dfc7ef9bd94fa5fc0f5c2bcea103361007c1c35b391b"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bff87cec7205913ff29dfc7ef9bd94fa5fc0f5c2bcea103361007c1c35b391b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7230c07fa742700ea1f000e717e04d62ab8af6cd6917d0262e7f47de0d32dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7230c07fa742700ea1f000e717e04d62ab8af6cd6917d0262e7f47de0d32dff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e788b0c0858a4773b0836d4ee92fa76fd589277c6d0b62af26af1a1998cc512c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45a3e3f0949dd4dcc3383568c31293be9dcc25a2f0a76ecad5bada2561210728","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45a3e3f0949dd4dcc3383568c31293be9dcc25a2f0a76ecad5bada2561210728"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1092b44cd2915597f9adcc466593093bf5603c0f41cb67ad870a2947570013fe"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45a3e3f0949dd4dcc3383568c31293be9dcc25a2f0a76ecad5bada2561210728","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cc6bbed7bf3189792c229c1be70562480e323006cb2d8f7adee9dd2e5fb7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c048685a11f99c07a00690a01cae33963ba8a7d34501c65f91d6b38bef0e6d67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1f65b3a66703316e36907fcf24fa9fdc5e549afb478c9c3977b6b85c3676bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c1f65b3a66703316e36907fcf24fa9fdc5e549afb478c9c3977b6b85c3676bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e788b0c0858a4773b0836d4ee92fa76fd589277c6d0b62af26af1a1998cc512c"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1f65b3a66703316e36907fcf24fa9fdc5e549afb478c9c3977b6b85c3676bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e577ed3a44b0cde83bdca78b301a151bbbf016d7df8a444de7f6053d44e89eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e577ed3a44b0cde83bdca78b301a151bbbf016d7df8a444de7f6053d44e89eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bff87cec7205913ff29dfc7ef9bd94fa5fc0f5c2bcea103361007c1c35b391b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bff87cec7205913ff29dfc7ef9bd94fa5fc0f5c2bcea103361007c1c35b391b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bff87cec7205913ff29dfc7ef9bd94fa5fc0f5c2bcea103361007c1c35b391b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef2ada752b929029f70b2caef02568d16af57b29eb20f5f4d840ed0e0acf2c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef2ada752b929029f70b2caef02568d16af57b29eb20f5f4d840ed0e0acf2c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7230c07fa742700ea1f000e717e04d62ab8af6cd6917d0262e7f47de0d32dff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e788b0c0858a4773b0836d4ee92fa76fd589277c6d0b62af26af1a1998cc512c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e788b0c0858a4773b0836d4ee92fa76fd589277c6d0b62af26af1a1998cc512c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cc6bbed7bf3189792c229c1be70562480e323006cb2d8f7adee9dd2e5fb7cd"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e788b0c0858a4773b0836d4ee92fa76fd589277c6d0b62af26af1a1998cc512c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45a3e3f0949dd4dcc3383568c31293be9dcc25a2f0a76ecad5bada2561210728","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1f65b3a66703316e36907fcf24fa9fdc5e549afb478c9c3977b6b85c3676bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7230c07fa742700ea1f000e717e04d62ab8af6cd6917d0262e7f47de0d32dff"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e577ed3a44b0cde83bdca78b301a151bbbf016d7df8a444de7f6053d44e89eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bff87cec7205913ff29dfc7ef9bd94fa5fc0f5c2bcea103361007c1c35b391b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef2ada752b929029f70b2caef02568d16af57b29eb20f5f4d840ed0e0acf2c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7230c07fa742700ea1f000e717e04d62ab8af6cd6917d0262e7f47de0d32dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7230c07fa742700ea1f000e717e04d62ab8af6cd6917d0262e7f47de0d32dff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45a3e3f0949dd4dcc3383568c31293be9dcc25a2f0a76ecad5bada2561210728"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c048685a11f99c07a00690a01cae33963ba8a7d34501c65f91d6b38bef0e6d67"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1f65b3a66703316e36907fcf24fa9fdc5e549afb478c9c3977b6b85c3676bf"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7230c07fa742700ea1f000e717e04d62ab8af6cd6917d0262e7f47de0d32dff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e788b0c0858a4773b0836d4ee92fa76fd589277c6d0b62af26af1a1998cc512c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e577ed3a44b0cde83bdca78b301a151bbbf016d7df8a444de7f6053d44e89eb"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bff87cec7205913ff29dfc7ef9bd94fa5fc0f5c2bcea103361007c1c35b391b"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef2ada752b929029f70b2caef02568d16af57b29eb20f5f4d840ed0e0acf2c4"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e788b0c0858a4773b0836d4ee92fa76fd589277c6d0b62af26af1a1998cc512c"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d"} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e577ed3a44b0cde83bdca78b301a151bbbf016d7df8a444de7f6053d44e89eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e577ed3a44b0cde83bdca78b301a151bbbf016d7df8a444de7f6053d44e89eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"info","ts":"2026-07-29T00:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7230c07fa742700ea1f000e717e04d62ab8af6cd6917d0262e7f47de0d32dff"} {"level":"info","ts":"2026-07-29T00:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e577ed3a44b0cde83bdca78b301a151bbbf016d7df8a444de7f6053d44e89eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef2ada752b929029f70b2caef02568d16af57b29eb20f5f4d840ed0e0acf2c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ef2ada752b929029f70b2caef02568d16af57b29eb20f5f4d840ed0e0acf2c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"info","ts":"2026-07-29T00:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e577ed3a44b0cde83bdca78b301a151bbbf016d7df8a444de7f6053d44e89eb"} {"level":"info","ts":"2026-07-29T00:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef2ada752b929029f70b2caef02568d16af57b29eb20f5f4d840ed0e0acf2c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7230c07fa742700ea1f000e717e04d62ab8af6cd6917d0262e7f47de0d32dff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:14:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:14:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef2ada752b929029f70b2caef02568d16af57b29eb20f5f4d840ed0e0acf2c4"} {"level":"info","ts":"2026-07-29T00:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e577ed3a44b0cde83bdca78b301a151bbbf016d7df8a444de7f6053d44e89eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef2ada752b929029f70b2caef02568d16af57b29eb20f5f4d840ed0e0acf2c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d"} {"level":"info","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"053ae338-a823-4582-951b-f3710d73867e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33862","PortSpecifier":{"PortValue":33862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"053ae338-a823-4582-951b-f3710d73867e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"053ae338-a823-4582-951b-f3710d73867e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33862","PortSpecifier":{"PortValue":33862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284061,"nanos":26842502},"http":{"id":"053ae338-a823-4582-951b-f3710d73867e","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"053ae338-a823-4582-951b-f3710d73867e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"053ae338-a823-4582-951b-f3710d73867e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"053ae338-a823-4582-951b-f3710d73867e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"053ae338-a823-4582-951b-f3710d73867e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"053ae338-a823-4582-951b-f3710d73867e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"053ae338-a823-4582-951b-f3710d73867e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"053ae338-a823-4582-951b-f3710d73867e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"053ae338-a823-4582-951b-f3710d73867e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"053ae338-a823-4582-951b-f3710d73867e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"053ae338-a823-4582-951b-f3710d73867e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"053ae338-a823-4582-951b-f3710d73867e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0608889c-79d7-47b3-925a-575e2fed4634","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34108","PortSpecifier":{"PortValue":34108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0608889c-79d7-47b3-925a-575e2fed4634","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0608889c-79d7-47b3-925a-575e2fed4634","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34108","PortSpecifier":{"PortValue":34108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284061,"nanos":76122718},"http":{"id":"0608889c-79d7-47b3-925a-575e2fed4634","method":"POST","headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0608889c-79d7-47b3-925a-575e2fed4634","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0608889c-79d7-47b3-925a-575e2fed4634","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0608889c-79d7-47b3-925a-575e2fed4634","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0608889c-79d7-47b3-925a-575e2fed4634","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0608889c-79d7-47b3-925a-575e2fed4634","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0608889c-79d7-47b3-925a-575e2fed4634","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa6130/rate-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fa6130/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0608889c-79d7-47b3-925a-575e2fed4634","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0608889c-79d7-47b3-925a-575e2fed4634","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0608889c-79d7-47b3-925a-575e2fed4634","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0608889c-79d7-47b3-925a-575e2fed4634","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0608889c-79d7-47b3-925a-575e2fed4634","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33878","PortSpecifier":{"PortValue":33878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33878","PortSpecifier":{"PortValue":33878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284061,"nanos":112389943},"http":{"id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZvbcU3qy9PcvHcJf_BbkPR74QerBuTret66HHhjR701DCpucaDDdTVTv2OUY"} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZvbcU3qy9PcvHcJf_BbkPR74QerBuTret66HHhjR701DCpucaDDdTVTv2OUY\"}"} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c1c3e061-4257-4ac0-afba-570f0779f4cf","keyName":"e2e-rate-a-b408d5","subscription":"e2e-rate-iso-a-b408d5","tenant":"e2e-shared-a-daedc5","userId":"c1c3e061-4257-4ac0-afba-570f0779f4cf","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-b408d5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b408d5","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b408d5"} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c1c3e061-4257-4ac0-afba-570f0779f4cf","keyName":"e2e-rate-a-b408d5","selected_subscription":"e2e-rate-iso-a-b408d5","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-b408d5@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b408d5","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:14:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddc01544-e4fb-45a5-86e9-487b4307a5aa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33894","PortSpecifier":{"PortValue":33894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33894","PortSpecifier":{"PortValue":33894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284062,"nanos":204368548},"http":{"id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZvbcU3qy9PcvHcJf_BbkPR74QerBuTret66HHhjR701DCpucaDDdTVTv2OUY"} {"level":"debug","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZvbcU3qy9PcvHcJf_BbkPR74QerBuTret66HHhjR701DCpucaDDdTVTv2OUY\"}"} {"level":"debug","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c1c3e061-4257-4ac0-afba-570f0779f4cf","keyName":"e2e-rate-a-b408d5","subscription":"e2e-rate-iso-a-b408d5","tenant":"e2e-shared-a-daedc5","userId":"c1c3e061-4257-4ac0-afba-570f0779f4cf","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-b408d5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b408d5","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}} {"level":"debug","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b408d5"} {"level":"debug","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c1c3e061-4257-4ac0-afba-570f0779f4cf","keyName":"e2e-rate-a-b408d5","selected_subscription":"e2e-rate-iso-a-b408d5","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-b408d5@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b408d5","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:14:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6ba753d-1c7c-4eba-91db-5d59facf6424","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33908","PortSpecifier":{"PortValue":33908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33908","PortSpecifier":{"PortValue":33908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284063,"nanos":242743199},"http":{"id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZvbcU3qy9PcvHcJf_BbkPR74QerBuTret66HHhjR701DCpucaDDdTVTv2OUY"} {"level":"debug","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZvbcU3qy9PcvHcJf_BbkPR74QerBuTret66HHhjR701DCpucaDDdTVTv2OUY\"}"} {"level":"debug","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c1c3e061-4257-4ac0-afba-570f0779f4cf","keyName":"e2e-rate-a-b408d5","subscription":"e2e-rate-iso-a-b408d5","tenant":"e2e-shared-a-daedc5","userId":"c1c3e061-4257-4ac0-afba-570f0779f4cf","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-b408d5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b408d5","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}} {"level":"debug","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b408d5"} {"level":"debug","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c1c3e061-4257-4ac0-afba-570f0779f4cf","keyName":"e2e-rate-a-b408d5","selected_subscription":"e2e-rate-iso-a-b408d5","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-b408d5@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b408d5","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:14:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bc11e6b-664c-4e0a-99bf-888b3de2c582","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a08d7c30-3d6e-40a1-850f-a6b1946d321b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49398","PortSpecifier":{"PortValue":49398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a08d7c30-3d6e-40a1-850f-a6b1946d321b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a08d7c30-3d6e-40a1-850f-a6b1946d321b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49398","PortSpecifier":{"PortValue":49398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284082,"nanos":423800686},"http":{"id":"a08d7c30-3d6e-40a1-850f-a6b1946d321b","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a08d7c30-3d6e-40a1-850f-a6b1946d321b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a08d7c30-3d6e-40a1-850f-a6b1946d321b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a08d7c30-3d6e-40a1-850f-a6b1946d321b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a08d7c30-3d6e-40a1-850f-a6b1946d321b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a08d7c30-3d6e-40a1-850f-a6b1946d321b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a08d7c30-3d6e-40a1-850f-a6b1946d321b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a08d7c30-3d6e-40a1-850f-a6b1946d321b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a08d7c30-3d6e-40a1-850f-a6b1946d321b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a08d7c30-3d6e-40a1-850f-a6b1946d321b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a08d7c30-3d6e-40a1-850f-a6b1946d321b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a08d7c30-3d6e-40a1-850f-a6b1946d321b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42278","PortSpecifier":{"PortValue":42278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42278","PortSpecifier":{"PortValue":42278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284082,"nanos":459403868},"http":{"id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","method":"POST","headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa6130/rate-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fa6130/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"703c5f80-d354-485d-afbc-3d6b74c6b7f0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49414","PortSpecifier":{"PortValue":49414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49414","PortSpecifier":{"PortValue":49414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284082,"nanos":502805450},"http":{"id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI"} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI\"}"} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","subscription":"e2e-rate-iso-a-043d08","tenant":"e2e-shared-a-daedc5","userId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-043d08"} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","selected_subscription":"e2e-rate-iso-a-043d08","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-043d08@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:14:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57d73d6d-a2a9-4800-88e5-2b21e4f6ab81","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49416","PortSpecifier":{"PortValue":49416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49416","PortSpecifier":{"PortValue":49416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284083,"nanos":539554419},"http":{"id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI"} {"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI\"}"} {"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","subscription":"e2e-rate-iso-a-043d08","tenant":"e2e-shared-a-daedc5","userId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}} {"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-043d08"} {"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","selected_subscription":"e2e-rate-iso-a-043d08","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-043d08@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:14:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fa1ab33-3814-4f05-b9a7-aa9e18afd7c5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49426","PortSpecifier":{"PortValue":49426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49426","PortSpecifier":{"PortValue":49426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284084,"nanos":575264487},"http":{"id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI"} {"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI\"}"} {"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","subscription":"e2e-rate-iso-a-043d08","tenant":"e2e-shared-a-daedc5","userId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}} {"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-043d08"} {"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","selected_subscription":"e2e-rate-iso-a-043d08","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-043d08@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:14:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fbb2f14-b9d0-4912-97fb-97cb3e9aa737","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49438","PortSpecifier":{"PortValue":49438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f71e95f-533f-4a85-96ca-3e269fed9737","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49438","PortSpecifier":{"PortValue":49438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284085,"nanos":619091898},"http":{"id":"5f71e95f-533f-4a85-96ca-3e269fed9737","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI"} {"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI\"}"} {"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","subscription":"e2e-rate-iso-a-043d08","tenant":"e2e-shared-a-daedc5","userId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}} {"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-043d08"} {"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","selected_subscription":"e2e-rate-iso-a-043d08","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-043d08@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f71e95f-533f-4a85-96ca-3e269fed9737","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49444","PortSpecifier":{"PortValue":49444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49444","PortSpecifier":{"PortValue":49444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284086,"nanos":655982739},"http":{"id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI"} {"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI\"}"} {"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","subscription":"e2e-rate-iso-a-043d08","tenant":"e2e-shared-a-daedc5","userId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}} {"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-043d08"} {"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","selected_subscription":"e2e-rate-iso-a-043d08","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-043d08@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:14:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d295adc8-741d-47e2-acd5-fec190e3cf0a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49458","PortSpecifier":{"PortValue":49458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49458","PortSpecifier":{"PortValue":49458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284087,"nanos":698887345},"http":{"id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI"} {"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI\"}"} {"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","subscription":"e2e-rate-iso-a-043d08","tenant":"e2e-shared-a-daedc5","userId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}} {"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-043d08"} {"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","selected_subscription":"e2e-rate-iso-a-043d08","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-043d08@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:14:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0d7aa55-0ec8-4a72-906e-d94cb6d19d3c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49712","PortSpecifier":{"PortValue":49712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"076a26ba-b918-4866-82ff-ea19992ecaf0","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49712","PortSpecifier":{"PortValue":49712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284088,"nanos":738599803},"http":{"id":"076a26ba-b918-4866-82ff-ea19992ecaf0","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI"} {"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI\"}"} {"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","subscription":"e2e-rate-iso-a-043d08","tenant":"e2e-shared-a-daedc5","userId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}} {"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-043d08"} {"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","selected_subscription":"e2e-rate-iso-a-043d08","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-043d08@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:14:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"076a26ba-b918-4866-82ff-ea19992ecaf0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"419bd722-817c-403b-908a-5b0fb0476583","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49720","PortSpecifier":{"PortValue":49720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"419bd722-817c-403b-908a-5b0fb0476583","method":"POST","path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions","host":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"419bd722-817c-403b-908a-5b0fb0476583","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49720","PortSpecifier":{"PortValue":49720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284089,"nanos":776129473},"http":{"id":"419bd722-817c-403b-908a-5b0fb0476583","method":"POST","headers":{":authority":"e2e-shared-a-daedc5.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI"} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15anqZbf3Ey6VegcN_7SIxMJ4qrmMSZ0FLkiVbWaroGOsOaVUVGmjfa85PfUI\"}"} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","subscription":"e2e-rate-iso-a-043d08","tenant":"e2e-shared-a-daedc5","userId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\",\"requestedSubscription\":\"e2e-rate-iso-a-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daedc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"}} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"419bd722-817c-403b-908a-5b0fb0476583","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-daedc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-043d08"} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"419bd722-817c-403b-908a-5b0fb0476583","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ba2d5bc6-4739-4391-83d5-928ca96507a3","keyName":"e2e-rate-a-043d08","selected_subscription":"e2e-rate-iso-a-043d08","selected_subscription_key":"ai-tenant-e2e-shared-a-daedc5/e2e-rate-iso-a-043d08@ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-daedc5/models/facebook/opt-125m","name":"rate-test-model-daedc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-043d08","namespace":"ai-tenant-e2e-shared-a-daedc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daedc5/rate-test-model-daedc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"419bd722-817c-403b-908a-5b0fb0476583","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"419bd722-817c-403b-908a-5b0fb0476583","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd998183-a00d-455d-a504-6f77e5d94049","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48226","PortSpecifier":{"PortValue":48226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd998183-a00d-455d-a504-6f77e5d94049","method":"POST","path":"/ai-tenant-e2e-shared-b-fa6130/rate-test-model-fa6130/v1/completions","host":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd998183-a00d-455d-a504-6f77e5d94049","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48226","PortSpecifier":{"PortValue":48226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284089,"nanos":807615804},"http":{"id":"fd998183-a00d-455d-a504-6f77e5d94049","method":"POST","headers":{":authority":"e2e-shared-b-fa6130.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-fa6130/rate-test-model-fa6130/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TQipdCQWoGqqPPeB_a3Eei96cn9uk4k9MsIOrUYPSkxvG7vLZzlPUwyI5biG"} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fa6130.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TQipdCQWoGqqPPeB_a3Eei96cn9uk4k9MsIOrUYPSkxvG7vLZzlPUwyI5biG\"}"} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fa6130.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ddcaff1-2b79-4aed-be21-5060a38248a0","keyName":"e2e-rate-b-043d08","subscription":"e2e-rate-iso-b-043d08","tenant":"e2e-shared-b-fa6130","userId":"6ddcaff1-2b79-4aed-be21-5060a38248a0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-fa6130.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-fa6130/rate-test-model-fa6130\",\"requestedSubscription\":\"e2e-rate-iso-b-043d08\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fa6130.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-fa6130/models/facebook/opt-125m","name":"rate-test-model-fa6130","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-043d08","namespace":"ai-tenant-e2e-shared-b-fa6130","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-fa6130/rate-test-model-fa6130"}} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd998183-a00d-455d-a504-6f77e5d94049","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fa6130/rate-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-fa6130/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"rate-test-model-fa6130\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-043d08"} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd998183-a00d-455d-a504-6f77e5d94049","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ddcaff1-2b79-4aed-be21-5060a38248a0","keyName":"e2e-rate-b-043d08","selected_subscription":"e2e-rate-iso-b-043d08","selected_subscription_key":"ai-tenant-e2e-shared-b-fa6130/e2e-rate-iso-b-043d08@ai-tenant-e2e-shared-b-fa6130/rate-test-model-fa6130","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-fa6130/models/facebook/opt-125m","name":"rate-test-model-fa6130","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-043d08","namespace":"ai-tenant-e2e-shared-b-fa6130","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-fa6130/rate-test-model-fa6130"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd998183-a00d-455d-a504-6f77e5d94049","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:14:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd998183-a00d-455d-a504-6f77e5d94049","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f145db24e635d68fc9889d4095aa76f175ffeecde111e8b83770e7d5b610bff"} {"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7e41bab5581b79902c4a34add3a94049207977e3f62d6f140c4e3fb81106070"} {"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b44b19731ca730d6f5a08d7ab95722485f501bc6c854dc4e126a668cd62ebea1"} {"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95e9af6b6d68c6c7408f67433386c150ab09b092202845a31b8134d56bee4363"} {"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd8591f5e8e2a1f715a7d141f7e5c7e356de2a766ede7a0f6aabf1f1dca3f3d8"} {"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7230c07fa742700ea1f000e717e04d62ab8af6cd6917d0262e7f47de0d32dff"} {"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5caf7eac81918e72e40fcf39c033e8eec04081d16951596396aed46350ff2a8"} {"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1092b44cd2915597f9adcc466593093bf5603c0f41cb67ad870a2947570013fe"} {"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53dc58cc56f4d8d73d756fb5172f0ae35b58553b78dd7f2e7f31e40a938368e2"} {"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e788b0c0858a4773b0836d4ee92fa76fd589277c6d0b62af26af1a1998cc512c"} {"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f8f09de99fdb22ea0784f9e211ee87db681131088615cac37e1a0c6f2bf0cd8"} {"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/494ad57902559c039d69b87d97a0ddb347c2604a6cc0855086937f62847c428d"} {"level":"info","ts":"2026-07-29T00:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e91c093ebeb32c0dfef9a6a6f3ea645b2e690084a1feecac285eda41df947ecf"} {"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a76112ee85a48d41d6495e50ff589010ff948b5b4b092c2be9bc9e792030837"} {"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45a3e3f0949dd4dcc3383568c31293be9dcc25a2f0a76ecad5bada2561210728"} {"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9544c8f493e1e1e67174f93fe5c4c959b3c36a6e299c55417a7a1cad044a14e"} {"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c048685a11f99c07a00690a01cae33963ba8a7d34501c65f91d6b38bef0e6d67"} {"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e577ed3a44b0cde83bdca78b301a151bbbf016d7df8a444de7f6053d44e89eb"} {"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bff87cec7205913ff29dfc7ef9bd94fa5fc0f5c2bcea103361007c1c35b391b"} {"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43c97ab9f5e9ab1984565a65621ecd455e673dc750f649bced1abab5ea63ef88"} {"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ef2ada752b929029f70b2caef02568d16af57b29eb20f5f4d840ed0e0acf2c4"} {"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6f80b696ce8f9f364b32c6652b48410393ca3460eb7e4bc33e251a3584a2ef3"} {"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c1f65b3a66703316e36907fcf24fa9fdc5e549afb478c9c3977b6b85c3676bf"} {"level":"info","ts":"2026-07-29T00:14:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0cc6bbed7bf3189792c229c1be70562480e323006cb2d8f7adee9dd2e5fb7cd"} {"level":"info","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52124","PortSpecifier":{"PortValue":52124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.21:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52124","PortSpecifier":{"PortValue":52124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.21:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284174,"nanos":36734008},"http":{"id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","method":"POST","headers":{":authority":"maas.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.21:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dc69191-cbbf-4dfb-921e-0b63458b3413","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52132","PortSpecifier":{"PortValue":52132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.21:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52132","PortSpecifier":{"PortValue":52132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.21:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284174,"nanos":88029294},"http":{"id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","method":"POST","headers":{":authority":"maas.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-k1FYq8wgbJ2U1KoY_WFVGXHkQiTEVrBR2wmDWYHCaC2uqf5rrplDkvbkp7bu"} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-k1FYq8wgbJ2U1KoY_WFVGXHkQiTEVrBR2wmDWYHCaC2uqf5rrplDkvbkp7bu\"}"} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b0fd9c14-a561-49ef-b368-17b2e9de028f","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"b0fd9c14-a561-49ef-b368-17b2e9de028f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.21:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b0fd9c14-a561-49ef-b368-17b2e9de028f","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:16:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6456505-0900-4fbe-8d1a-609f3bfda25c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642"} {"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642"} {"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642"} {"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"} {"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"} {"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642"} {"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"} {"level":"error","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067"} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2"} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a"} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a"} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e"} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a"} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e"} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82dd0ee7ebf1884e0616c2d5f305306abbd0ea8f96738a4740d045c665e5ec6b"} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a"} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82dd0ee7ebf1884e0616c2d5f305306abbd0ea8f96738a4740d045c665e5ec6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82dd0ee7ebf1884e0616c2d5f305306abbd0ea8f96738a4740d045c665e5ec6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e"} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/105d34c9b91e9a2d8eeff320531321125d1c080f952eb0d0cf25c66cf2ce6991"} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82dd0ee7ebf1884e0616c2d5f305306abbd0ea8f96738a4740d045c665e5ec6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"105d34c9b91e9a2d8eeff320531321125d1c080f952eb0d0cf25c66cf2ce6991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["105d34c9b91e9a2d8eeff320531321125d1c080f952eb0d0cf25c66cf2ce6991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44"} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82dd0ee7ebf1884e0616c2d5f305306abbd0ea8f96738a4740d045c665e5ec6b"} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"105d34c9b91e9a2d8eeff320531321125d1c080f952eb0d0cf25c66cf2ce6991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/105d34c9b91e9a2d8eeff320531321125d1c080f952eb0d0cf25c66cf2ce6991"} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82dd0ee7ebf1884e0616c2d5f305306abbd0ea8f96738a4740d045c665e5ec6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"105d34c9b91e9a2d8eeff320531321125d1c080f952eb0d0cf25c66cf2ce6991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44"} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44"} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T00:16:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T00:16:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44"} {"level":"info","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57712","PortSpecifier":{"PortValue":57712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-f318ab.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57712","PortSpecifier":{"PortValue":57712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284219,"nanos":2769471},"http":{"id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","method":"POST","headers":{":authority":"e2e-ipp-a-f318ab.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"]}} {"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d3d7d5ca62c2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0153959e-b737-40bf-a758-b3a4e3ec7ac4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5bc8817-fe98-42e5-be82-c32c0ae13c4f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-f318ab.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"ipp-route-f318ab\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-f318ab/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:16:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fcb46ff-8108-4f3b-9d96-47c7f2389ae9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57728","PortSpecifier":{"PortValue":57728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","method":"POST","path":"/ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab/v1/chat/completions","host":"e2e-ipp-a-f318ab.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57728","PortSpecifier":{"PortValue":57728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785284221,"nanos":62954852},"http":{"id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","method":"POST","headers":{":authority":"e2e-ipp-a-f318ab.apps.d9383abb-09dc-440d-98e0-d3d7d5ca62c2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1J3YFG91CsTnpaPhO_H6I6u1UMcj7UVDyApZZQ4icuwNR1VRbFSJGhBS0NWys"} {"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-f318ab.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1J3YFG91CsTnpaPhO_H6I6u1UMcj7UVDyApZZQ4icuwNR1VRbFSJGhBS0NWys\"}"} {"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-f318ab.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7d62c11a-9269-4dfd-a61e-c673f0b24cab","keyName":"e2e-ipp-f318ab","subscription":"ipp-route-f318ab-sub","tenant":"e2e-ipp-a-f318ab","userId":"7d62c11a-9269-4dfd-a61e-c673f0b24cab","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-f318ab.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab\",\"requestedSubscription\":\"ipp-route-f318ab-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-f318ab.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-f318ab/models/facebook/opt-125m","name":"ipp-route-f318ab","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-f318ab-sub","namespace":"ai-tenant-e2e-ipp-a-f318ab","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab"}} {"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"ipp-route-f318ab\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-f318ab/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-f318ab-sub"} {"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7d62c11a-9269-4dfd-a61e-c673f0b24cab","keyName":"e2e-ipp-f318ab","selected_subscription":"ipp-route-f318ab-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab-sub@ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-f318ab/models/facebook/opt-125m","name":"ipp-route-f318ab","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-f318ab-sub","namespace":"ai-tenant-e2e-ipp-a-f318ab","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-f318ab/ipp-route-f318ab"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T00:17:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"592b6da6-c63c-4c5f-bdc4-e1a84ea59ffe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T00:18:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82dd0ee7ebf1884e0616c2d5f305306abbd0ea8f96738a4740d045c665e5ec6b"} {"level":"info","ts":"2026-07-29T00:18:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/105d34c9b91e9a2d8eeff320531321125d1c080f952eb0d0cf25c66cf2ce6991"} {"level":"info","ts":"2026-07-29T00:18:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4bd918f192ef458b1c186f8fc8411f8c92d3bfcd2957694793a170d9cecac44"} {"level":"info","ts":"2026-07-29T00:18:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f09314e3fcf3baabdd2c252e51ef41b974a0bdd0a5fdd3f3a69d764ce562712e"} {"level":"info","ts":"2026-07-29T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/096e94aac8d2bdb4261db62e23b15360df8df53ba2cf756769446a477aa2d6f2"} {"level":"info","ts":"2026-07-29T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a507ef3b8e028820bdf0d30c211e1c66f0ce2231782f7871bb27ef5e43da8de2"} {"level":"info","ts":"2026-07-29T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00e8f3439b94e23ae48e380d517a7870ebf9afbba0eb6a1c3edc4500795a399a"} {"level":"info","ts":"2026-07-29T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50f1f655d3e671ad84d4aa489f4411e78f0011942ec74c25f30a57f59f512642"} {"level":"info","ts":"2026-07-29T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89e093d223a3a1372cd2ec7bd4006f919831f1ad2f5774408f1c2166c8ec7067"} {"level":"info","ts":"2026-07-29T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30df0eb1e0d9b0cad3d397d53bb5f40c83806b12bb29696e79407c534f1553b7"} {"level":"info","ts":"2026-07-29T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03b240e0b7a96ce303314380190371fcbe42333f49d89f7e0aa5f233197e08b6"} {"level":"info","ts":"2026-07-29T00:18:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab7114df3fa6cf64bc4f738eebe001c35af190e3a981f035227c5aa5cec9415a"}